For a list of all the paths to a given function you may use Smatch: ./smatch/smatch_data/db/smdb.py ips_leave or ./smatch/smatch_data/db/smdb.py call_tree ips_leave But perhaps you already know how to do it.