Fuzz introspector: fuzz_jwt
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
15 31 google.auth.jwt.decode call site: {node_id} google.auth.jwt._verify_iat_and_exp
2 28 google.auth.jwt.decode call site: {node_id} google.auth.exceptions.GoogleAuthError.__init__

Fuzzer calltree

0 ...fuzz_jwt.TestOneInput [function] [call site] 00000
1 ...fuzz_jwt.test_token_decode [function] [call site] 00001
2 atheris.FuzzedDataProvider [function] [call site] 00002
2 fdp.ConsumeString [function] [call site] 00003
2 google.auth.jwt.decode [function] [call site] 00004
3 google.auth.jwt._unverified_decode [function] [call site] 00005
4 google.auth._helpers.to_bytes [function] [call site] 00006
5 .isinstance [function] [call site] 00007
5 value.encode [function] [call site] 00008
5 .isinstance [function] [call site] 00009
4 token.count [function] [call site] 00010
4 token.split [function] [call site] 00011
4 google.auth._helpers.padded_urlsafe_b64decode [function] [call site] 00012
5 google.auth._helpers.to_bytes [function] [call site] 00013
5 base64.urlsafe_b64decode [function] [call site] 00015
4 google.auth.jwt._decode_jwt_segment [function] [call site] 00016
5 google.auth._helpers.padded_urlsafe_b64decode [function] [call site] 00017
5 section_bytes.decode [function] [call site] 00018
5 json.loads [function] [call site] 00019
5 google.auth.exceptions.GoogleAuthError.__init__ [function] [call site] 00020
5 six.raise_from [function] [call site] 00023
4 google.auth.jwt._decode_jwt_segment [function] [call site] 00024
4 .isinstance [function] [call site] 00025
4 .isinstance [function] [call site] 00026
3 header.get [function] [call site] 00027
3 header.get [function] [call site] 00028
3 six.raise_from [function] [call site] 00029
3 google.auth.exceptions.GoogleAuthError.__init__ [function] [call site] 00030
3 six.raise_from [function] [call site] 00031
3 google.auth.exceptions.GoogleAuthError.__init__ [function] [call site] 00032
3 .isinstance [function] [call site] 00033
3 certs.values [function] [call site] 00034
3 google.auth.crypt.verify_signature [function] [call site] 00035
4 .isinstance [function] [call site] 00036
4 verifier_cls.from_string [function] [call site] 00037
4 verifier.verify [function] [call site] 00038
3 google.auth.jwt._verify_iat_and_exp [function] [call site] 00039
4 google.auth._helpers.utcnow [function] [call site] 00040
5 datetime.datetime.utcnow [function] [call site] 00041
4 google.auth._helpers.datetime_to_secs [function] [call site] 00042
5 value.utctimetuple [function] [call site] 00043
5 calendar.timegm [function] [call site] 00044
3 payload.get [function] [call site] 00045
3 .isinstance [function] [call site] 00046