Fuzz introspector: crl_parse_crl_tbscertlist_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['abort']

2 2 bssl::Span ::operator[](unsignedlong)const call site: 00000 /src/boringssl/include/openssl/span.h:165
2 2 1 :

['abort']

2 2 bssl::Span ::subspan(unsignedlong,unsignedlong)const call site: 00000 /src/boringssl/include/openssl/span.h:173
0 7 1 :

['CBS_get_bytes']

0 7 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:379
0 7 1 :

['CBS_get_bytes']

0 7 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:387
0 0 None 0 100 bssl::der::Parser::ReadConstructed(unsignedint,bssl::der::Parser*) call site: 00000 /src/boringssl/pki/parser.cc:123
0 0 None 0 93 bssl::ParseCrlTbsCertList(bssl::der::Input,bssl::ParsedCrlTbsCertList*) call site: 00000 /src/boringssl/pki/crl.cc:175
0 0 None 0 49 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:312
0 0 None 0 49 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:315
0 0 None 0 12 bssl::der::(anonymousnamespace)::GetUnsignedIntegerLength(bssl::der::Input) call site: 00000 /src/boringssl/pki/parse_values.cc:151
0 0 None 0 7 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:354
0 0 None 0 0 cbs_get_any_asn1_element(cbs_st*,cbs_st*,unsignedint*,unsignedlong*,int*,int*,int) call site: 00000 /src/boringssl/crypto/bytestring/cbs.cc:394
0 0 None 0 0 bssl::der::Parser::Advance() call site: 00000 /src/boringssl/pki/parser.cc:42

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 bssl::der::Input::Input(unsigned char const*, unsigned long) [function] [call site] 00001
2 bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long) [function] [call site] 00002
1 bssl::ParsedCrlTbsCertList::ParsedCrlTbsCertList() [function] [call site] 00003
2 bssl::der::Input::Input() [function] [call site] 00004
3 bssl::Span<unsigned char const>::Span() [function] [call site] 00005
4 bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long) [function] [call site] 00006
1 bssl::ParseCrlTbsCertList(bssl::der::Input, bssl::ParsedCrlTbsCertList*) [function] [call site] 00007
2 bssl::der::Parser::Parser(bssl::der::Input) [function] [call site] 00008
3 bssl::der::Input::data() const [function] [call site] 00009
4 bssl::Span<unsigned char const>::data() const [function] [call site] 00010
3 bssl::der::Input::size() const [function] [call site] 00011
4 bssl::Span<unsigned char const>::size() const [function] [call site] 00012
2 bssl::der::Parser::Parser() [function] [call site] 00014
2 bssl::der::Parser::ReadSequence(bssl::der::Parser*) [function] [call site] 00016
3 bssl::der::Parser::ReadConstructed(unsigned int, bssl::der::Parser*) [function] [call site] 00017
4 bssl::der::Input::Input() [function] [call site] 00018
4 bssl::der::Parser::ReadTag(unsigned int, bssl::der::Input*) [function] [call site] 00019
5 bssl::der::Input::Input() [function] [call site] 00020
5 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00021
6 CBS_get_any_asn1_element [function] [call site] 00022
7 cbs_get_any_asn1_element(cbs_st*, cbs_st*, unsigned int*, unsigned long*, int*, int*, int) [function] [call site] 00023
8 __assert_fail [call site] 00024
8 __assert_fail [call site] 00025
8 parse_asn1_tag(cbs_st*, unsigned int*) [function] [call site] 00026
9 CBS_get_u8 [function] [call site] 00027
10 cbs_get(cbs_st*, unsigned char const**, unsigned long) [function] [call site] 00028
9 parse_base128_integer(cbs_st*, unsigned long*) [function] [call site] 00029
10 CBS_get_u8 [function] [call site] 00030
8 CBS_get_u8 [function] [call site] 00031
8 CBS_get_bytes [function] [call site] 00033
9 cbs_get(cbs_st*, unsigned char const**, unsigned long) [function] [call site] 00034
8 cbs_get_u(cbs_st*, unsigned long*, unsigned long) [function] [call site] 00036
9 cbs_get(cbs_st*, unsigned char const**, unsigned long) [function] [call site] 00037
8 CBS_get_bytes [function] [call site] 00038
6 CBS_skip [function] [call site] 00039
7 cbs_get(cbs_st*, unsigned char const**, unsigned long) [function] [call site] 00040
6 bssl::der::Input::Input(unsigned char const*, unsigned long) [function] [call site] 00044
5 bssl::der::Parser::Advance() [function] [call site] 00045
5 abort [call site] 00047
4 bssl::der::Parser::Parser(bssl::der::Input) [function] [call site] 00048
2 bssl::der::Parser::ReadOptionalTag(unsigned int, std::__1::optional<bssl::der::Input>*) [function] [call site] 00049
3 bssl::der::Parser::HasMore() [function] [call site] 00050
3 bssl::der::Input::Input() [function] [call site] 00052
3 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00053
3 bssl::der::Parser::Advance() [function] [call site] 00054
3 abort [call site] 00055
2 std::__1::optional<bssl::der::Input>::operator*[abi:ne180100]() & [function] [call site] 00056
3 std::__1::__optional_storage_base<bssl::der::Input, false>::__get[abi:ne180100]() & [function] [call site] 00057
2 bssl::der::ParseUint64(bssl::der::Input, unsigned long*) [function] [call site] 00058
3 bssl::der::IsValidInteger(bssl::der::Input, bool*) [function] [call site] 00059
4 bssl::der::Input::data() const [function] [call site] 00060
4 bssl::der::Input::size() const [function] [call site] 00061
4 CBS_is_valid_asn1_integer [function] [call site] 00063
5 CBS_get_u8 [function] [call site] 00064
5 CBS_get_u8 [function] [call site] 00065
3 bssl::der::(anonymous namespace)::GetUnsignedIntegerLength(bssl::der::Input) [function] [call site] 00066
4 bssl::der::ByteReader::ByteReader(bssl::der::Input) [function] [call site] 00067
5 bssl::Span<unsigned char const>::Span<bssl::der::Input, void, bssl::der::Input>(bssl::der::Input const&) [function] [call site] 00068
6 bssl::der::Input::data() const [function] [call site] 00069
6 bssl::der::Input::size() const [function] [call site] 00070
4 bssl::der::ByteReader::ReadByte(unsigned char*) [function] [call site] 00071
5 bssl::der::ByteReader::HasMore() [function] [call site] 00072
6 bssl::Span<unsigned char const>::empty() const [function] [call site] 00073
5 bssl::Span<unsigned char const>::operator[](unsigned long) const [function] [call site] 00074
6 abort [call site] 00075
5 bssl::der::ByteReader::Advance(unsigned long) [function] [call site] 00076
6 bssl::Span<unsigned char const>::size() const [function] [call site] 00077
6 abort [call site] 00078
6 bssl::Span<unsigned char const>::subspan(unsigned long, unsigned long) const [function] [call site] 00079
7 abort [call site] 00080
7 bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long) [function] [call site] 00081
4 bssl::der::Input::size() const [function] [call site] 00082
4 bssl::der::Input::size() const [function] [call site] 00083
4 bssl::der::Input::size() const [function] [call site] 00084
3 bssl::der::ByteReader::ByteReader(bssl::der::Input) [function] [call site] 00085
3 bssl::der::ByteReader::ReadByte(unsigned char*) [function] [call site] 00086
2 bssl::der::Parser::ReadRawTLV(bssl::der::Input*) [function] [call site] 00087
3 CBS_get_any_asn1_element [function] [call site] 00088
3 bssl::der::Input::Input(unsigned char const*, unsigned long) [function] [call site] 00091
2 bssl::der::Parser::ReadRawTLV(bssl::der::Input*) [function] [call site] 00092
2 bssl::ReadUTCOrGeneralizedTime(bssl::der::Parser*, bssl::der::GeneralizedTime*) [function] [call site] 00093
3 bssl::der::Input::Input() [function] [call site] 00094
3 bssl::der::Parser::ReadTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00095
4 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00096
4 bssl::der::Parser::Advance() [function] [call site] 00097
4 abort [call site] 00098
3 bssl::der::ParseUTCTime(bssl::der::Input, bssl::der::GeneralizedTime*) [function] [call site] 00099
4 bssl::der::ByteReader::ByteReader(bssl::der::Input) [function] [call site] 00100
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned short>(bssl::der::ByteReader&, unsigned long, unsigned short*) [function] [call site] 00101
5 bssl::der::ByteReader::ReadByte(unsigned char*) [function] [call site] 00102
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00103
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00104
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00105
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00106
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00107
4 bssl::der::ByteReader::ReadByte(unsigned char*) [function] [call site] 00108
4 bssl::der::ByteReader::HasMore() [function] [call site] 00109
4 bssl::der::(anonymous namespace)::ValidateGeneralizedTime(bssl::der::GeneralizedTime const&) [function] [call site] 00110
5 abort [call site] 00111
3 bssl::der::ParseGeneralizedTime(bssl::der::Input, bssl::der::GeneralizedTime*) [function] [call site] 00112
4 bssl::der::ByteReader::ByteReader(bssl::der::Input) [function] [call site] 00113
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned short>(bssl::der::ByteReader&, unsigned long, unsigned short*) [function] [call site] 00114
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00115
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00116
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00117
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00118
4 bool bssl::der::(anonymous namespace)::DecimalStringToUint<unsigned char>(bssl::der::ByteReader&, unsigned long, unsigned char*) [function] [call site] 00119
4 bssl::der::ByteReader::ReadByte(unsigned char*) [function] [call site] 00120
4 bssl::der::ByteReader::HasMore() [function] [call site] 00121
4 bssl::der::(anonymous namespace)::ValidateGeneralizedTime(bssl::der::GeneralizedTime const&) [function] [call site] 00122
2 bssl::der::Input::Input() [function] [call site] 00123
2 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00124
2 bssl::ReadUTCOrGeneralizedTime(bssl::der::Parser*, bssl::der::GeneralizedTime*) [function] [call site] 00125
2 bssl::der::Input::Input() [function] [call site] 00126
2 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*) [function] [call site] 00127
2 bssl::der::Input::Input() [function] [call site] 00128
2 bssl::der::Parser::ReadRawTLV(bssl::der::Input*) [function] [call site] 00129
2 bssl::der::Parser::ReadOptionalTag(unsigned int, std::__1::optional<bssl::der::Input>*) [function] [call site] 00130
2 bssl::der::Parser::HasMore() [function] [call site] 00131
2 bssl::der::Parser::HasMore() [function] [call site] 00132
1 bssl::ParsedCrlTbsCertList::~ParsedCrlTbsCertList() [function] [call site] 00133