> ## Documentation Index
> Fetch the complete documentation index at: https://vulhunt-docs.binarly.io/llms.txt
> Use this file to discover all available pages before exploring further.

# CalleesMatchingTable

The `CalleesMatchingTable` object represents the result of enumerating specified function callees using dataflow analysis.
It is returned by [`ProjectHandle:callees_matching`](/vulhunt-reference/types/project-handle) and provides detailed information about each matched call site, including addresses, callee context, function inputs (arguments passed to the function), and output (the function return value).

### Fields

| Field            | Description                                      | Type                                                           |
| :--------------- | :----------------------------------------------- | :------------------------------------------------------------- |
| `call_address`   | Address of the call site within the function     | [`AddressValue`](/vulhunt-reference/types/address-value)       |
| `name`           | Name of the callee function                      | `string`                                                       |
| `callee_address` | Address of the callee function                   | [`AddressValue`](/vulhunt-reference/types/address-value)       |
| `callee`         | Context of the callee function                   | [`FunctionContext`](/vulhunt-reference/types/function-context) |
| `inputs`         | The parameters passed to the called function     | [`OperandInfo[]`](/vulhunt-reference/types/operand-info)       |
| `output`         | The output (return value) of the called function | [`OperandInfo`](/vulhunt-reference/types/operand-info)         |
| `debug`          | Debug logs for the matching process              | `string`                                                       |

### Reference

#### call\_address

The address of the call site.

#### name

The name of the callee function (the function being invoked from the call site).

#### callee\_address

The address of the function being invoked from the call site.

#### callee

A [`FunctionContext`](/vulhunt-reference/types/function-context) object representing the function that is invoked from the call site.

#### inputs

An array of [`OperandInfo`](/vulhunt-reference/types/operand-info) objects representing an argument passed to the called function.

#### output

An [`OperandInfo`](/vulhunt-reference/types/operand-info) object representing the return value of the called function.

#### debug

A string containing debug logs generated during the matching process.

### Example

```lua theme={null}
local results = project:callees_matching({
  from = "process_request",
  using = {parameters = {var:named "src", var:named "dst"}}
})

for _, entry in ipairs(results) do
  print("Call to:", entry.name, "at address:", entry.call_address)
  print("Callee address:", entry.callee_address)
  print("Source argument annotation:", entry.inputs[1].annotation)
  print("Destination argument annotation:", entry.inputs[2].annotation)
  if entry.output then
    print("Return value annotation:", entry.output.annotation)
  end
  print("Debug log:", entry.debug)
end
```