Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
62	62	2 : View List ['ERR_put_error', 'cbb_on_error(cbb_st*)']	62	62	CBB_flush	call site: 00110	/src/boringssl/crypto/bytestring/cbb.cc:258
58	58	1 : View List ['ERR_put_error']	58	58	OPENSSL_malloc	call site: 00022	/src/boringssl/crypto/mem.cc:206
4	4	1 : View List ['cbb_on_error(cbb_st*)']	4	4	cbb_add_u(cbb_st*,unsignedlong,unsignedlong)	call site: 00000	/src/boringssl/crypto/bytestring/cbb.cc:441
2	2	1 : View List ['OPENSSL_memory_alloc']	60	60	OPENSSL_malloc	call site: 00019	/src/boringssl/crypto/mem.cc:191
2	2	1 : View List ['OPENSSL_memory_get_size']	2	88	OPENSSL_realloc	call site: 00118	/src/boringssl/crypto/mem.cc:273
2	2	1 : View List ['OPENSSL_memory_free']	2	2	OPENSSL_free	call site: 00123	/src/boringssl/crypto/mem.cc:243
0	7	1 : View List ['CBS_get_bytes']	0	7	cbs_get_any_asn1_element(cbs_st,cbs_st,unsignedint,unsignedlong,int,int,int)	call site: 00000	/src/boringssl/crypto/bytestring/cbs.cc:379
0	7	1 : View List ['CBS_get_bytes']	0	7	cbs_get_any_asn1_element(cbs_st,cbs_st,unsignedint,unsignedlong,int,int,int)	call site: 00000	/src/boringssl/crypto/bytestring/cbs.cc:387
0	0	None	62	169	CBB_flush	call site: 00110	/src/boringssl/crypto/bytestring/cbb.cc:223
0	0	None	62	169	CBB_flush	call site: 00110	/src/boringssl/crypto/bytestring/cbb.cc:226
0	0	None	62	64	CBB_flush	call site: 00110	/src/boringssl/crypto/bytestring/cbb.cc:244
0	0	None	62	62	CBB_flush	call site: 00110	/src/boringssl/crypto/bytestring/cbb.cc:219

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           bssl::der::Input::Input(unsigned char const*, unsigned long)

[function] [call site] 00001


             bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long)

[function] [call site] 00002


           bssl::CertErrors::CertErrors()

[function] [call site] 00003


           bssl::NormalizeName(bssl::der::Input, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*, bssl::CertErrors*)

[function] [call site] 00004


             abort

[call site] 00005


             bssl::der::Parser::Parser(bssl::der::Input)

[function] [call site] 00006


               bssl::der::Input::data() const

[function] [call site] 00007


                 bssl::Span<unsigned char const>::data() const

[function] [call site] 00008


               bssl::der::Input::size() const

[function] [call site] 00009


                 bssl::Span<unsigned char const>::size() const

[function] [call site] 00010


               CBS_init

[function] [call site] 00011


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::StackAllocated()

[function] [call site] 00012


               CBB_zero

[function] [call site] 00013


                 OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00014


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00015


             CBB_init

[function] [call site] 00016


               CBB_zero

[function] [call site] 00017


               OPENSSL_malloc

[function] [call site] 00018


                 should_fail_allocation()

[function] [call site] 00019


                 __assert_fail

[call site] 00020


                 __assert_fail

[call site] 00021


                 OPENSSL_memory_alloc

[call site] 00022


                 __asan_poison_memory_region(void const*, unsigned long)

[function] [call site] 00023


                 ERR_put_error

[function] [call site] 00024


                   err_get_state()

[function] [call site] 00025


                     CRYPTO_get_thread_local

[function] [call site] 00026


                       CRYPTO_once

[function] [call site] 00027


                         pthread_once

[call site] 00028


                         abort

[call site] 00029


                       thread_local_init()

[function] [call site] 00030


                         pthread_key_create

[call site] 00031


                         thread_local_destructor(void*)

[function] [call site] 00032


                           pthread_mutex_lock

[call site] 00033


                           OPENSSL_memcpy(void*, void const*, unsigned long)

[function] [call site] 00034


                           pthread_mutex_unlock

[call site] 00035


                       pthread_getspecific

[call site] 00036


                     OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00037


                     CRYPTO_set_thread_local

[function] [call site] 00038


                       CRYPTO_once

[function] [call site] 00039


                       thread_local_init()

[function] [call site] 00040


                       pthread_getspecific

[call site] 00041


                       OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00042


                       pthread_setspecific

[call site] 00043


                       pthread_mutex_lock

[call site] 00044


                       pthread_mutex_unlock

[call site] 00045


                     err_state_free(void*)

[function] [call site] 00046


                       err_clear((anonymous namespace)::err_error_st*)

[function] [call site] 00047


                         OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00048


                   __errno_location

[call site] 00049


                   err_clear((anonymous namespace)::err_error_st*)

[function] [call site] 00050


               cbb_init(cbb_st*, unsigned char*, unsigned long, int)

[function] [call site] 00051


             bssl::der::Parser::HasMore()

[function] [call site] 00052


               CBS_len

[function] [call site] 00053


             bssl::der::Parser::Parser()

[function] [call site] 00054


               CBS_init

[function] [call site] 00055


             bssl::der::Parser::ReadConstructed(unsigned int, bssl::der::Parser*)

[function] [call site] 00056


               bssl::der::Input::Input()

[function] [call site] 00057


                 bssl::Span<unsigned char const>::Span()

[function] [call site] 00058


                   bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long)

[function] [call site] 00059


               bssl::der::Parser::ReadTag(unsigned int, bssl::der::Input*)

[function] [call site] 00060


                 bssl::der::Input::Input()

[function] [call site] 00061


                 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*)

[function] [call site] 00062


                   CBS_get_any_asn1_element

[function] [call site] 00063


                     cbs_get_any_asn1_element(cbs_st*, cbs_st*, unsigned int*, unsigned long*, int*, int*, int)

[function] [call site] 00064


                       __assert_fail

[call site] 00065


                       __assert_fail

[call site] 00066


                       parse_asn1_tag(cbs_st*, unsigned int*)

[function] [call site] 00067


                         CBS_get_u8

[function] [call site] 00068


                           cbs_get(cbs_st*, unsigned char const**, unsigned long)

[function] [call site] 00069


                         parse_base128_integer(cbs_st*, unsigned long*)

[function] [call site] 00070


                           CBS_get_u8

[function] [call site] 00071


                       CBS_get_u8

[function] [call site] 00072


                       CBS_len

[function] [call site] 00073


                       CBS_get_bytes

[function] [call site] 00074


                         cbs_get(cbs_st*, unsigned char const**, unsigned long)

[function] [call site] 00075


                         CBS_init

[function] [call site] 00076


                       cbs_get_u(cbs_st*, unsigned long*, unsigned long)

[function] [call site] 00077


                         cbs_get(cbs_st*, unsigned char const**, unsigned long)

[function] [call site] 00078


                       CBS_get_bytes

[function] [call site] 00079


                   CBS_skip

[function] [call site] 00080


                     cbs_get(cbs_st*, unsigned char const**, unsigned long)

[function] [call site] 00081


                   CBS_len

[function] [call site] 00082


                   CBS_data

[function] [call site] 00083


                   CBS_len

[function] [call site] 00084


                   bssl::der::Input::Input(unsigned char const*, unsigned long)

[function] [call site] 00085


                 bssl::der::Parser::Advance()

[function] [call site] 00086


                   CBS_skip

[function] [call site] 00087


                 abort

[call site] 00088


               bssl::der::Parser::Parser(bssl::der::Input)

[function] [call site] 00089


             bssl::ReadRdn(bssl::der::Parser*, std::__1::vector<bssl::X509NameAttribute, std::__1::allocator<bssl::X509NameAttribute> >*)

[function] [call site] 00090


               bssl::der::Parser::HasMore()

[function] [call site] 00091


               bssl::der::Parser::Parser()

[function] [call site] 00092


               bssl::der::Parser::ReadSequence(bssl::der::Parser*)

[function] [call site] 00093


                 bssl::der::Parser::ReadConstructed(unsigned int, bssl::der::Parser*)

[function] [call site] 00094


               bssl::der::Input::Input()

[function] [call site] 00095


               bssl::der::Parser::ReadTag(unsigned int, bssl::der::Input*)

[function] [call site] 00096


               bssl::der::Input::Input()

[function] [call site] 00097


               bssl::der::Parser::ReadTagAndValue(unsigned int*, bssl::der::Input*)

[function] [call site] 00098


                 bssl::der::Parser::PeekTagAndValue(unsigned int*, bssl::der::Input*)

[function] [call site] 00099


                 bssl::der::Parser::Advance()

[function] [call site] 00100


                 abort

[call site] 00101


               bssl::der::Parser::HasMore()

[function] [call site] 00102


               bssl::X509NameAttribute::X509NameAttribute(bssl::der::Input, unsigned int, bssl::der::Input)

[function] [call site] 00103


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00104


             CBB_add_asn1

[function] [call site] 00105


               CBB_flush

[function] [call site] 00106


                 cbb_get_base(cbb_st*)

[function] [call site] 00107


                 __assert_fail

[call site] 00108


                 __assert_fail

[call site] 00109


                 CBB_flush

[function] [call site] 00110


                   __assert_fail

[call site] 00111


                   ERR_put_error

[function] [call site] 00112


                   cbb_buffer_add(cbb_buffer_st*, unsigned char**, unsigned long)

[function] [call site] 00113


                     cbb_buffer_reserve(cbb_buffer_st*, unsigned char**, unsigned long)

[function] [call site] 00114


                       ERR_put_error

[function] [call site] 00115


                       ERR_put_error

[function] [call site] 00116


                       OPENSSL_realloc

[function] [call site] 00117


                         OPENSSL_malloc

[function] [call site] 00118


                         OPENSSL_memory_get_size

[call site] 00119


                         __asan_unpoison_memory_region(void const*, unsigned long)

[function] [call site] 00120


                         __asan_poison_memory_region(void const*, unsigned long)

[function] [call site] 00121


                         OPENSSL_malloc

[function] [call site] 00122


                         OPENSSL_free

[function] [call site] 00123


                           OPENSSL_memory_free

[call site] 00124


                           __asan_unpoison_memory_region(void const*, unsigned long)

[function] [call site] 00125


                           OPENSSL_cleanse

[function] [call site] 00126


                             OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00127


                   OPENSSL_memmove(void*, void const*, unsigned long)

[function] [call site] 00128


                   ERR_put_error

[function] [call site] 00129


                   cbb_on_error(cbb_st*)

[function] [call site] 00130


                     cbb_get_base(cbb_st*)

[function] [call site] 00131


               CBB_add_u8

[function] [call site] 00132


                 cbb_add_u(cbb_st*, unsigned long, unsigned long)

[function] [call site] 00133


                   CBB_add_space

[function] [call site] 00134


                     CBB_flush

[function] [call site] 00135


                     cbb_get_base(cbb_st*)

[function] [call site] 00136


                     cbb_buffer_add(cbb_buffer_st*, unsigned char**, unsigned long)

[function] [call site] 00137


                   cbb_on_error(cbb_st*)

[function] [call site] 00138


               add_base128_integer(cbb_st*, unsigned long)

[function] [call site] 00139


                 CBB_add_u8

[function] [call site] 00140


               CBB_add_u8

[function] [call site] 00141


               cbb_add_child(cbb_st*, cbb_st*, unsigned char, int)

[function] [call site] 00142


                 __assert_fail

[call site] 00143


                 __assert_fail

[call site] 00144


                 cbb_get_base(cbb_st*)

[function] [call site] 00145


                 cbb_buffer_add(cbb_buffer_st*, unsigned char**, unsigned long)

[function] [call site] 00146


                 OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00147


                 CBB_zero

[function] [call site] 00148


             CBB_add_asn1

[function] [call site] 00149


             CBB_add_asn1

[function] [call site] 00150


             bssl::der::Input::data() const

[function] [call site] 00151


             bssl::der::Input::size() const

[function] [call site] 00152


             CBB_add_bytes

[function] [call site] 00153


               CBB_add_space

[function] [call site] 00154


               OPENSSL_memcpy(void*, void const*, unsigned long)

[function] [call site] 00155


             bssl::(anonymous namespace)::IsNormalizableDirectoryString(unsigned int)

[function] [call site] 00156


             bssl::(anonymous namespace)::NormalizeValue(bssl::X509NameAttribute, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*, bssl::CertErrors*)

[function] [call site] 00157


               abort

[call site] 00158


               bssl::X509NameAttribute::ValueAsStringUnsafe(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) const

[function] [call site] 00159


                 bssl::Span<unsigned char const>::Span<bssl::der::Input, void, bssl::der::Input>(bssl::der::Input const&)

[function] [call site] 00160


                   bssl::der::Input::data() const

[function] [call site] 00161


                   bssl::der::Input::size() const

[function] [call site] 00162


                 bssl::BytesAsStringView(bssl::Span<unsigned char const>)

[function] [call site] 00163


                   bssl::Span<unsigned char const>::data() const

[function] [call site] 00164


                   bssl::Span<unsigned char const>::size() const

[function] [call site] 00165


                 bssl::der::ParseUniversalString(bssl::der::Input, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)

[function] [call site] 00166


                   bssl::der::Input::size() const

[function] [call site] 00167


                   bssl::der::Input::data() const

[function] [call site] 00168


                   bssl::der::Input::size() const

[function] [call site] 00169


                   CBS_init

[function] [call site] 00170


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::StackAllocated()

[function] [call site] 00171


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00172


                   bssl::der::Input::size() const

[function] [call site] 00173


                   CBB_init

[function] [call site] 00174


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::~StackAllocated()

[function] [call site] 00175


                     CBB_cleanup

[function] [call site] 00176


                       __assert_fail

[call site] 00177


                       OPENSSL_free

[function] [call site] 00178


                     __clang_call_terminate

[call site] 00179


                       __cxa_begin_catch

[call site] 00180


                   CBS_len

[function] [call site] 00181


                   CBS_get_utf32_be

[function] [call site] 00182


                     CBS_get_u32

[function] [call site] 00183


                       cbs_get_u(cbs_st*, unsigned long*, unsigned long)

[function] [call site] 00184


                     is_valid_code_point(unsigned int)

[function] [call site] 00185


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00186


                   CBB_add_utf8

[function] [call site] 00187


                     is_valid_code_point(unsigned int)

[function] [call site] 00188


                     CBB_add_u8

[function] [call site] 00189


                     CBB_add_u8

[function] [call site] 00190


                     CBB_add_u8

[function] [call site] 00191


                     CBB_add_u8

[function] [call site] 00192


                     CBB_add_u8

[function] [call site] 00193


                     CBB_add_u8

[function] [call site] 00194


                     CBB_add_u8

[function] [call site] 00195


                     CBB_add_u8

[function] [call site] 00196


                     CBB_add_u8

[function] [call site] 00197


                     CBB_add_u8

[function] [call site] 00198


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00199


                   CBB_data

[function] [call site] 00200


                     __assert_fail

[call site] 00201


                   CBB_len

[function] [call site] 00202


                     __assert_fail

[call site] 00203


                     __assert_fail

[call site] 00204


                 bssl::der::ParseBmpString(bssl::der::Input, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)

[function] [call site] 00205


                   bssl::der::Input::size() const

[function] [call site] 00206


                   bssl::der::Input::data() const

[function] [call site] 00207


                   bssl::der::Input::size() const

[function] [call site] 00208


                   CBS_init

[function] [call site] 00209


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::StackAllocated()

[function] [call site] 00210


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00211


                   bssl::der::Input::size() const

[function] [call site] 00212


                   CBB_init

[function] [call site] 00213


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::~StackAllocated()

[function] [call site] 00214


                   CBS_len

[function] [call site] 00215


                   CBS_get_ucs2_be

[function] [call site] 00216


                     CBS_get_u16

[function] [call site] 00217


                       cbs_get_u(cbs_st*, unsigned long*, unsigned long)

[function] [call site] 00218


                     is_valid_code_point(unsigned int)

[function] [call site] 00219


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00220


                   CBB_add_utf8

[function] [call site] 00221


                   bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00222


                   CBB_data

[function] [call site] 00223


                   CBB_len

[function] [call site] 00224


                 __assert_fail

[call site] 00225


               bssl::CreateCertErrorParams1SizeT(char const*, unsigned long)

[function] [call site] 00226


                 abort

[call site] 00227


               bssl::CertErrors::AddError(void const*, std::__1::unique_ptr<bssl::CertErrorParams, std::__1::default_delete<bssl::CertErrorParams> >)

[function] [call site] 00228


                 bssl::CertErrors::Add(bssl::CertError::Severity, void const*, std::__1::unique_ptr<bssl::CertErrorParams, std::__1::default_delete<bssl::CertErrorParams> >)

[function] [call site] 00229


               bssl::(anonymous namespace)::NormalizeDirectoryString(bssl::(anonymous namespace)::CharsetEnforcement, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)

[function] [call site] 00230


               bssl::(anonymous namespace)::NormalizeDirectoryString(bssl::(anonymous namespace)::CharsetEnforcement, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)

[function] [call site] 00231


               bssl::(anonymous namespace)::NormalizeDirectoryString(bssl::(anonymous namespace)::CharsetEnforcement, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*)

[function] [call site] 00232


               bssl::CreateCertErrorParams1SizeT(char const*, unsigned long)

[function] [call site] 00233


               bssl::CertErrors::AddError(void const*, std::__1::unique_ptr<bssl::CertErrorParams, std::__1::default_delete<bssl::CertErrorParams> >)

[function] [call site] 00234


             CBB_add_asn1

[function] [call site] 00235


             CBB_add_bytes

[function] [call site] 00236


             CBB_add_asn1

[function] [call site] 00237


             bssl::der::Input::data() const

[function] [call site] 00238


             bssl::der::Input::size() const

[function] [call site] 00239


             CBB_add_bytes

[function] [call site] 00240


             CBB_flush

[function] [call site] 00241


             CBB_flush_asn1_set_of

[function] [call site] 00242


               CBB_flush

[function] [call site] 00243


               CBB_data

[function] [call site] 00244


               CBB_len

[function] [call site] 00245


               CBS_init

[function] [call site] 00246


               CBS_len

[function] [call site] 00247


               CBS_get_any_asn1_element

[function] [call site] 00248


               ERR_put_error

[function] [call site] 00249


               CBB_len

[function] [call site] 00250


               CBB_data

[function] [call site] 00251


               OPENSSL_memdup

[function] [call site] 00252


                 OPENSSL_malloc

[function] [call site] 00253


                 OPENSSL_memcpy(void*, void const*, unsigned long)

[function] [call site] 00254


               OPENSSL_calloc

[function] [call site] 00255


                 ERR_put_error

[function] [call site] 00256


                 OPENSSL_zalloc

[function] [call site] 00257


                   OPENSSL_malloc

[function] [call site] 00258


                   OPENSSL_memset(void*, int, unsigned long)

[function] [call site] 00259


               CBS_init

[function] [call site] 00260


               CBS_get_any_asn1_element

[function] [call site] 00261


               qsort

[call site] 00262


               compare_set_of_element(void const*, void const*)

[function] [call site] 00263


                 CBS_len

[function] [call site] 00264


                 CBS_data

[function] [call site] 00265


                 OPENSSL_memcmp(void const*, void const*, unsigned long)

[function] [call site] 00266


                   memcmp

[call site] 00267


               CBB_data

[function] [call site] 00268


               CBS_data

[function] [call site] 00269


               CBS_len

[function] [call site] 00270


               OPENSSL_memcpy(void*, void const*, unsigned long)

[function] [call site] 00271


               CBS_len

[function] [call site] 00272


               __assert_fail

[call site] 00273


               OPENSSL_free

[function] [call site] 00274


               OPENSSL_free

[function] [call site] 00275


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00276


             CBB_flush

[function] [call site] 00277


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00278


             CBB_data

[function] [call site] 00279


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::get()

[function] [call site] 00280


             CBB_data

[function] [call site] 00281


             CBB_len

[function] [call site] 00282


             bssl::internal::StackAllocated<cbb_st, void, &CBB_zero, &CBB_cleanup>::~StackAllocated()

[function] [call site] 00283


           bssl::der::Input::Input(std::__1::basic_string_view<char, std::__1::char_traits<char> >)

[function] [call site] 00284


             bssl::StringAsBytes(std::__1::basic_string_view<char, std::__1::char_traits<char> >)

[function] [call site] 00285


               bssl::Span<unsigned char const> bssl::MakeConstSpan<unsigned char const>(unsigned char const*, unsigned long)

[function] [call site] 00286


                 bssl::Span<unsigned char const>::Span(unsigned char const*, unsigned long)

[function] [call site] 00287


           bssl::NormalizeName(bssl::der::Input, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*, bssl::CertErrors*)

[function] [call site] 00288


           abort

[call site] 00289


           abort

[call site] 00290


           bssl::CertErrors::~CertErrors()

[function] [call site] 00291