Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
207	98	google.auth.jwt.decode	call site: 00098	google.oauth2.gdch_credentials.ServiceAccountCredentials.refresh
40	38	google.auth.jwt.encode	call site: 00038	google.auth.iam.Signer._make_signing_request
14	2	...fuzz_jwt_roundtrip.test_roundtrip_unverified	call site: 00002	google.auth.crypt._python_rsa.RSASigner.from_string
2	23	...fuzz_jwt_roundtrip.test_roundtrip_unverified	call site: 00023	fdp.ConsumeString
2	26	...fuzz_jwt_roundtrip.test_roundtrip_unverified	call site: 00026	google.auth.jwt.encode
2	32	google.auth.jwt.encode	call site: 00032	google.auth._helpers.unpadded_urlsafe_b64encode
2	35	google.auth._helpers.unpadded_urlsafe_b64encode	call site: 00035	google.auth._helpers.unpadded_urlsafe_b64encode
1	0	EP	call site: 00000	...fuzz_jwt_roundtrip.test_roundtrip_unverified
1	30	google.auth.jwt.encode	call site: 00030	header.update

Fuzzer calltree


         ...fuzz_jwt_roundtrip.TestOneInput

[function] [call site] 00000


           ...fuzz_jwt_roundtrip.test_roundtrip_unverified

[function] [call site] 00001


             atheris.FuzzedDataProvider

[function] [call site] 00002


             google.auth.crypt._python_rsa.RSASigner.from_string

[function] [call site] 00003


               google.auth._helpers.from_bytes

[function] [call site] 00004


                 <builtin>.isinstance

[function] [call site] 00005


                 value.decode

[function] [call site] 00006


                 <builtin>.isinstance

[function] [call site] 00007


               pyasn1_modules.pem.readPemBlocksFromFile

[function] [call site] 00008


               io.StringIO

[function] [call site] 00009


               rsa.key.PrivateKey.load_pkcs1

[function] [call site] 00010


               pyasn1.codec.der.decoder.decode

[function] [call site] 00011


               key_info.getComponentByName

[function] [call site] 00012


               rsa.key.PrivateKey.load_pkcs1

[function] [call site] 00013


               private_key_info.asOctets

[function] [call site] 00014


               google.auth.crypt._python_rsa.RSASigner.__init__

[function] [call site] 00015


             google.auth.crypt._cryptography_rsa.RSASigner.from_string

[function] [call site] 00016


               google.auth._helpers.to_bytes

[function] [call site] 00017


                 <builtin>.isinstance

[function] [call site] 00018


                 value.encode

[function] [call site] 00019


                 <builtin>.isinstance

[function] [call site] 00020


               cryptography.hazmat.primitives.serialization.load_pem_private_key

[function] [call site] 00021


               google.auth.crypt._cryptography_rsa.RSASigner.__init__

[function] [call site] 00022


             fdp.ConsumeIntInRange

[function] [call site] 00023


             fdp.ConsumeString

[function] [call site] 00024


             fdp.ConsumeIntInRange

[function] [call site] 00025


             fdp.ConsumeString

[function] [call site] 00026


             fdp.ConsumeString

[function] [call site] 00027


             google.auth.jwt.encode

[function] [call site] 00028


               header.update

[function] [call site] 00029


               <builtin>.isinstance

[function] [call site] 00030


               header.update

[function] [call site] 00031


               header.update

[function] [call site] 00032


               json.dumps

[function] [call site] 00033


               google.auth._helpers.unpadded_urlsafe_b64encode

[function] [call site] 00034


                 base64.urlsafe_b64encode

[function] [call site] 00035


               json.dumps

[function] [call site] 00036


               google.auth._helpers.unpadded_urlsafe_b64encode

[function] [call site] 00037


               google.auth.iam.Signer.sign

[function] [call site] 00038


                 google.auth.iam.Signer._make_signing_request

[function] [call site] 00039


                   google.auth._exponential_backoff.ExponentialBackoff.__iter__

[function] [call site] 00040


                     google.auth._exponential_backoff._BaseExponentialBackoff._reset

[function] [call site] 00041


                   google.auth._exponential_backoff.ExponentialBackoff.__next__

[function] [call site] 00042


                     google.auth._exponential_backoff._BaseExponentialBackoff._calculate_jitter

[function] [call site] 00043


                       random.uniform

[function] [call site] 00044


                     time.sleep

[function] [call site] 00045


                   google.auth._helpers.to_bytes

[function] [call site] 00046


                   _IAM_SIGN_ENDPOINT.replace

[function] [call site] 00047


                   json.dumps

[function] [call site] 00048


                   base64.b64encode

[function] [call site] 00049


                   google.auth._exponential_backoff.ExponentialBackoff.__init__

[function] [call site] 00050


                     <builtin>.super

[function] [call site] 00051


                   google.auth.credentials.Credentials.before_request

[function] [call site] 00052


                     google.auth.credentials.Credentials._non_blocking_refresh

[function] [call site] 00053


                       google.auth._refresh_worker.RefreshThreadManager.start_refresh

[function] [call site] 00054


                         threading.Thread.is_alive

[function] [call site] 00055


                         copy.deepcopy

[function] [call site] 00056


                         google.auth._refresh_worker.RefreshThread.__init__

[function] [call site] 00057


                           <builtin>.super

[function] [call site] 00058


                         threading.Thread.start

[function] [call site] 00059


                       google.auth.impersonated_credentials.IDTokenCredentials.refresh

[function] [call site] 00060


                         iam._IAM_IDTOKEN_ENDPOINT.replace

[function] [call site] 00061


                         google.auth.metrics.token_request_id_token_impersonate

[function] [call site] 00062


                           google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00063


                             platform.python_version

[function] [call site] 00064


                         google.auth.transport.requests.AuthorizedSession.__init__

[function] [call site] 00065


                           <builtin>.super

[function] [call site] 00066


                           requests.Session

[function] [call site] 00067


                           requests.adapters.HTTPAdapter

[function] [call site] 00068


                           google.auth.transport.requests.Request.__init__

[function] [call site] 00069


                             requests.Session

[function] [call site] 00070


                           <builtin>.isinstance

[function] [call site] 00071


                         requests.Session.post

[function] [call site] 00072


                         json.dumps

[function] [call site] 00073


                         google.auth.transport.requests.AuthorizedSession.close

[function] [call site] 00074


                           <builtin>.super

[function] [call site] 00075


                         response.json

[function] [call site] 00076


                         datetime.datetime.utcfromtimestamp

[function] [call site] 00077


                         google.auth.jwt.decode

[function] [call site] 00078


                           google.auth.jwt._unverified_decode

[function] [call site] 00079


                             google.auth._helpers.to_bytes

[function] [call site] 00080


                             token.count

[function] [call site] 00081


                             token.split

[function] [call site] 00082


                             google.auth._helpers.padded_urlsafe_b64decode

[function] [call site] 00083


                               google.auth._helpers.to_bytes

[function] [call site] 00084


                               <builtin>.len

[function] [call site] 00085


                               base64.urlsafe_b64decode

[function] [call site] 00086


                             google.auth.jwt._decode_jwt_segment

[function] [call site] 00087


                               google.auth._helpers.padded_urlsafe_b64decode

[function] [call site] 00088


                               section_bytes.decode

[function] [call site] 00089


                               json.loads

[function] [call site] 00090


                               google.auth.exceptions.GoogleAuthError.__init__

[function] [call site] 00091


                                 <builtin>.super

[function] [call site] 00092


                                 kwargs.get

[function] [call site] 00093


                             google.auth.jwt._decode_jwt_segment

[function] [call site] 00094


                             <builtin>.isinstance

[function] [call site] 00095


                             <builtin>.isinstance

[function] [call site] 00096


                           header.get

[function] [call site] 00097


                           header.get

[function] [call site] 00098


                           <builtin>.isinstance

[function] [call site] 00099


                           certs.values

[function] [call site] 00100


                           google.auth.crypt.verify_signature

[function] [call site] 00101


                             <builtin>.isinstance

[function] [call site] 00102


                             verifier_cls.from_string

[function] [call site] 00103


                             verifier.verify

[function] [call site] 00104


                           google.auth.jwt._verify_iat_and_exp

[function] [call site] 00105


                             google.auth._helpers.utcnow

[function] [call site] 00106


                               datetime.datetime.now

[function] [call site] 00107


                               now.replace

[function] [call site] 00108


                             google.auth._helpers.datetime_to_secs

[function] [call site] 00109


                               value.utctimetuple

[function] [call site] 00110


                               calendar.timegm

[function] [call site] 00111


                           payload.get

[function] [call site] 00112


                           <builtin>.isinstance

[function] [call site] 00113


                       google.oauth2.credentials.Credentials.refresh

[function] [call site] 00114


                         <builtin>.isinstance

[function] [call site] 00115


                         <builtin>.isinstance

[function] [call site] 00116


                         google.auth._helpers.utcnow

[function] [call site] 00117


                         google.oauth2.reauth.refresh_grant

[function] [call site] 00118


                           google.auth.metrics.token_request_user

[function] [call site] 00119


                             google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00120


                           google.oauth2._client._token_endpoint_request_no_throw

[function] [call site] 00121


                             google.auth._exponential_backoff.ExponentialBackoff.__iter__

[function] [call site] 00122


                             google.auth._exponential_backoff.ExponentialBackoff.__next__

[function] [call site] 00123


                             json.dumps

[function] [call site] 00124


                             urllib.parse.urlencode

[function] [call site] 00125


                             headers_to_use.update

[function] [call site] 00126


                             google.auth._exponential_backoff.ExponentialBackoff.__init__

[function] [call site] 00127


                             response.data.decode

[function] [call site] 00128


                             <builtin>.hasattr

[function] [call site] 00129


                             json.loads

[function] [call site] 00130


                             google.oauth2._client._can_retry

[function] [call site] 00131


                               response_data.get

[function] [call site] 00132


                               response_data.get

[function] [call site] 00133


                               <builtin>.isinstance

[function] [call site] 00134


                               <builtin>.isinstance

[function] [call site] 00135


                               <builtin>.any

[function] [call site] 00136


                           <builtin>.isinstance

[function] [call site] 00137


                           response_data.get

[function] [call site] 00138


                           response_data.get

[function] [call site] 00139


                           response_data.get

[function] [call site] 00140


                           google.oauth2.reauth.get_rapt_token

[function] [call site] 00141


                             sys.stderr.write

[function] [call site] 00142


                             google.oauth2._client.refresh_grant

[function] [call site] 00143


                               google.oauth2._client._token_endpoint_request

[function] [call site] 00144


                                 google.oauth2._client._token_endpoint_request_no_throw

[function] [call site] 00145


                                 google.oauth2._client._handle_error_response

[function] [call site] 00146


                                   <builtin>.isinstance

[function] [call site] 00147


                                   response_data.get

[function] [call site] 00148


                                   json.dumps

[function] [call site] 00149


                               google.oauth2._client._handle_refresh_grant_response

[function] [call site] 00150


                                 google.auth.exceptions.GoogleAuthError.__init__

[function] [call site] 00151


                                 response_data.get

[function] [call site] 00152


                                 google.oauth2._client._parse_expiry

[function] [call site] 00153


                                   response_data.get

[function] [call site] 00154


                                   <builtin>.isinstance

[function] [call site] 00155


                                   <builtin>.int

[function] [call site] 00156


                                   google.auth._helpers.utcnow

[function] [call site] 00157


                                   datetime.timedelta

[function] [call site] 00158


                             google.oauth2.reauth._obtain_rapt

[function] [call site] 00159


                               google.oauth2.reauth._get_challenges

[function] [call site] 00160


                                 google.auth.metrics.reauth_start

[function] [call site] 00161


                                   google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00162


                                 google.oauth2._client._token_endpoint_request

[function] [call site] 00163


                               challenges.AVAILABLE_CHALLENGES.keys

[function] [call site] 00164


                               <builtin>.list

[function] [call site] 00165


                               <builtin>.range

[function] [call site] 00166


                               google.oauth2.reauth.is_interactive

[function] [call site] 00167


                                 sys.stdin.isatty

[function] [call site] 00168


                               google.oauth2.reauth._run_next_challenge

[function] [call site] 00169


                                 challenges.AVAILABLE_CHALLENGES.get

[function] [call site] 00170


                                 c.obtain_challenge_input

[function] [call site] 00171


                                 google.oauth2.reauth._send_challenge_result

[function] [call site] 00172


                                   google.auth.metrics.reauth_continue

[function] [call site] 00173


                                     google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00174


                                   google.oauth2._client._token_endpoint_request

[function] [call site] 00175


                             sys.stderr.write

[function] [call site] 00176


                           google.oauth2._client._token_endpoint_request_no_throw

[function] [call site] 00177


                           google.oauth2._client._handle_error_response

[function] [call site] 00178


                           google.oauth2._client._handle_refresh_grant_response

[function] [call site] 00179


                         grant_response.get

[function] [call site] 00180


                         <builtin>.frozenset

[function] [call site] 00181


                         <builtin>.frozenset

[function] [call site] 00182


                         _LOGGER.warning

[function] [call site] 00183


                       google.auth.app_engine.Credentials.refresh

[function] [call site] 00184


                         google.appengine.api.app_identity.get_access_token

[function] [call site] 00185


                         datetime.datetime.utcfromtimestamp

[function] [call site] 00186


                       google.auth.api_key.Credentials.refresh

[function] [call site] 00187


                       google.oauth2.gdch_credentials.ServiceAccountCredentials.refresh

[function] [call site] 00188


                         <builtin>.isinstance

[function] [call site] 00189


                         google.oauth2.gdch_credentials.ServiceAccountCredentials._create_jwt

[function] [call site] 00190


                           google.auth._helpers.utcnow

[function] [call site] 00191


                           google.auth._helpers.datetime_to_secs

[function] [call site] 00192


                           google.auth._helpers.datetime_to_secs

[function] [call site] 00193


                           google.auth.jwt.encode

[function] [call site] 00194


                           google.auth._helpers.from_bytes

[function] [call site] 00195


                         google.oauth2._client._token_endpoint_request

[function] [call site] 00196


                         google.oauth2._client._handle_refresh_grant_response

[function] [call site] 00197


                       google.oauth2.service_account.IDTokenCredentials.refresh

[function] [call site] 00198


                         google.oauth2.service_account.IDTokenCredentials._refresh_with_iam_endpoint

[function] [call site] 00199


                           google.auth.jwt.Credentials.from_signing_credentials

[function] [call site] 00200


                             kwargs.setdefault

[function] [call site] 00201


                             kwargs.setdefault

[function] [call site] 00202


                             google.auth.jwt.Credentials.__init__

[function] [call site] 00203


                               <builtin>.super

[function] [call site] 00204


                           jwt_credentials.refresh

[function] [call site] 00205


                           google.oauth2._client.call_iam_generate_id_token_endpoint

[function] [call site] 00206


                             google.oauth2._client._token_endpoint_request

[function] [call site] 00207


                             iam_id_token_endpoint.replace

[function] [call site] 00208


                             google.auth.exceptions.GoogleAuthError.__init__

[function] [call site] 00209


                             google.auth.jwt.decode

[function] [call site] 00210


                             datetime.datetime.utcfromtimestamp

[function] [call site] 00211


                           jwt_credentials.token.decode

[function] [call site] 00212


                         google.oauth2.service_account.IDTokenCredentials._make_authorization_grant_assertion

[function] [call site] 00213


                           google.auth._helpers.utcnow

[function] [call site] 00214


                           datetime.timedelta

[function] [call site] 00215


                           google.auth._helpers.datetime_to_secs

[function] [call site] 00216


                           google.auth._helpers.datetime_to_secs

[function] [call site] 00217


                           payload.update

[function] [call site] 00218


                           google.auth.jwt.encode

[function] [call site] 00219


                         google.oauth2._client.id_token_jwt_grant

[function] [call site] 00220


                           google.oauth2._client._token_endpoint_request

[function] [call site] 00221


                           google.auth.metrics.token_request_id_token_sa_assertion

[function] [call site] 00222


                             google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00223


                           google.auth.exceptions.GoogleAuthError.__init__

[function] [call site] 00224


                           google.auth.jwt.decode

[function] [call site] 00225


                           datetime.datetime.utcfromtimestamp

[function] [call site] 00226


                       google.auth.external_account.Credentials.refresh

[function] [call site] 00227


                         google.auth.external_account.Credentials._mtls_required

[function] [call site] 00228


                         functools.partial

[function] [call site] 00229


                         google.auth.external_account.Credentials._get_mtls_cert_and_key_paths

[function] [call site] 00230


                         google.auth.external_account.Credentials._should_initialize_impersonated_credentials

[function] [call site] 00231


                         google.auth.external_account.Credentials._initialize_impersonated_credentials

[function] [call site] 00232


                           google.auth.external_account.Credentials._constructor_args

[function] [call site] 00233


                             copy.deepcopy

[function] [call site] 00234


                             copy.deepcopy

[function] [call site] 00235


                             args.pop

[function] [call site] 00236


                           kwargs.update

[function] [call site] 00237


                           google.auth.impersonated_credentials.Credentials.__init__

[function] [call site] 00238


                             <builtin>.super

[function] [call site] 00239


                             copy.copy

[function] [call site] 00240


                             <builtin>.isinstance

[function] [call site] 00241


                             <builtin>.hasattr

[function] [call site] 00242


                             google.auth._helpers.utcnow

[function] [call site] 00243


                         google.auth.app_engine.Credentials.refresh

[function] [call site] 00244


                         google.auth.external_account.Credentials.refresh

[function] [call site] 00245


                         google.auth._helpers.utcnow

[function] [call site] 00246


                         google.auth.metrics.byoid_metrics_header

[function] [call site] 00247


                           google.auth.metrics.python_and_auth_lib_version

[function] [call site] 00248


                           metrics_options.items

[function] [call site] 00249


                         google.oauth2.sts.Client.exchange_token

[function] [call site] 00250


                           json.dumps

[function] [call site] 00251


                           urllib.parse.quote

[function] [call site] 00252


                           <builtin>.dict

[function] [call site] 00253


                           google.oauth2.sts.Client._make_request

[function] [call site] 00254


                             _URLENCODED_HEADERS.copy

[function] [call site] 00255


                             <builtin>.dict

[function] [call site] 00256


                             google.oauth2.utils.OAuthClientAuthHandler.apply_client_authentication_options

[function] [call site] 00257


                               google.oauth2.utils.OAuthClientAuthHandler._inject_authenticated_headers

[function] [call site] 00258


                                 base64.b64encode

[function] [call site] 00259


                               google.oauth2.utils.OAuthClientAuthHandler._inject_authenticated_request_body

[function] [call site] 00260


                             urllib.parse.urlencode

[function] [call site] 00261


                             response.data.decode

[function] [call site] 00262


                             <builtin>.hasattr

[function] [call site] 00263


                             google.oauth2.utils.handle_error_response

[function] [call site] 00264


                               json.loads

[function] [call site] 00265


                               error_components.append

[function] [call site] 00266


                               error_components.append

[function] [call site] 00267


                               error_components.append

[function] [call site] 00268


                             json.loads

[function] [call site] 00269


                         google.auth.external_account.Credentials.retrieve_subject_token

[function] [call site] 00270


                         response_data.get

[function] [call site] 00271


                         response_data.get

[function] [call site] 00272


                         <builtin>.isinstance

[function] [call site] 00273


                         <builtin>.int

[function] [call site] 00274


                         datetime.timedelta

[function] [call site] 00275


                       google.auth.external_account_authorized_user.Credentials.refresh

[function] [call site] 00276


                         google.auth._helpers.utcnow

[function] [call site] 00277


                         google.auth.external_account_authorized_user.Credentials._make_sts_request

[function] [call site] 00278


                           google.oauth2.sts.Client.refresh_token

[function] [call site] 00279


                             google.oauth2.sts.Client._make_request

[function] [call site] 00280


                         response_data.get

[function] [call site] 00281


                         response_data.get

[function] [call site] 00282


                         datetime.timedelta

[function] [call site] 00283


                       google.auth._refresh_worker.RefreshThreadManager.clear_error

[function] [call site] 00284


                     google.auth.credentials.Credentials._blocking_refresh

[function] [call site] 00285


                       google.auth.impersonated_credentials.IDTokenCredentials.refresh

[function] [call site] 00286


                       google.oauth2.credentials.Credentials.refresh

[function] [call site] 00287


                       google.auth.app_engine.Credentials.refresh

[function] [call site] 00288


                       google.auth.api_key.Credentials.refresh

[function] [call site] 00289


                       google.oauth2.gdch_credentials.ServiceAccountCredentials.refresh

[function] [call site] 00290


                       google.oauth2.service_account.IDTokenCredentials.refresh

[function] [call site] 00291


                       google.auth.external_account.Credentials.refresh

[function] [call site] 00292


                       google.auth.external_account_authorized_user.Credentials.refresh

[function] [call site] 00293


                     google.auth.impersonated_credentials.Credentials._metric_header_for_usage

[function] [call site] 00294


                     google.oauth2.credentials.Credentials._metric_header_for_usage

[function] [call site] 00295


                     google.auth.compute_engine.credentials.Credentials._metric_header_for_usage

[function] [call site] 00296


                     google.oauth2.service_account.Credentials._metric_header_for_usage

[function] [call site] 00297


                       google.oauth2.service_account.Credentials._use_self_signed_jwt

[function] [call site] 00298


                     google.auth.metrics.add_metric_header

[function] [call site] 00299


                     google.auth.api_key.Credentials.apply

[function] [call site] 00300


                   google.auth.api_key.Credentials.before_request

[function] [call site] 00301


                     google.auth.api_key.Credentials.apply

[function] [call site] 00302


                   response.data.decode

[function] [call site] 00303


                   json.loads

[function] [call site] 00304


                 base64.b64decode

[function] [call site] 00305


               google.auth._helpers.unpadded_urlsafe_b64encode

[function] [call site] 00306


               segments.append

[function] [call site] 00307


             google.auth.jwt.decode

[function] [call site] 00308