Fuzz introspector: kex_fuzz
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1637 4037 9 :

['sshbuf_free', 'memset', 'ssh_packet_send2_wrapped', 'sshlog', 'kex_start_rekex', 'ssh_packet_need_rekeying', 'monotime', 'free', 'sshbuf_len']

1637 4037 ssh_packet_send2 call site: 00929 /src/hpn-ssh/packet.c:1378
1461 1461 1 :

['ssh_packet_disconnect']

2314 2845 ssh_packet_send2_wrapped call site: 01073 /src/hpn-ssh/packet.c:1287
1461 1461 1 :

['ssh_packet_disconnect']

2054 5332 kex_choose_conf call site: 01289 /src/hpn-ssh/kex.c:1286
1461 1461 1 :

['ssh_packet_disconnect']

1912 8733 ssh_packet_read_poll2 call site: 01528 /src/hpn-ssh/packet.c:1698
790 790 4 :

['get_local_ipaddr', 'get_peer_ipaddr', 'get_peer_port', 'get_local_port']

790 790 ssh_remote_ipaddr call site: 00755 /src/hpn-ssh/packet.c:548
657 657 1 :

['ssh_set_newkeys']

657 657 ssh_packet_send2_wrapped call site: 01151 /src/hpn-ssh/packet.c:1306
604 920 4 :

['free', 'match_filter_denylist', 'sshlog', 'sshfatal']

604 920 compat_kex_proposal call site: 00813 /src/hpn-ssh/compat.c:176
593 2930 16 :

['strcmp', 'calloc', 'sshfatal', 'proposals_match', 'ssh_remote_ipaddr', 'choose_enc', 'sshlog', 'choose_mac', 'choose_comp', 'cipher_by_name', 'xstrdup', 'ssh_remote_port', 'cipher_seclen', 'free', 'match_list', 'cipher_authlen']

593 2938 kex_choose_conf call site: 01334 /src/hpn-ssh/kex.c:1369
548 755 7 :

['ssh_packet_write_poll', 'ms_subtract_diff', '__errno_location', 'ppoll', 'ms_to_timespec', 'ssh_packet_have_data_to_write', 'monotime_tv']

548 755 ssh_packet_write_wait call site: 01127 /src/hpn-ssh/packet.c:2142
469 847 2 :

['sshbuf_len', 'ssh_packet_stop_discard']

469 847 ssh_packet_start_discard call site: 01497 /src/hpn-ssh/packet.c:439
428 428 1 :

['sshkey_parse_private_pem_fileblob']

428 428 sshkey_parse_private_fileblob_type call site: 00531 /src/hpn-ssh/sshkey.c:3596
354 356 8 :

['EVP_CIPHER_CTX_ctrl', 'strstr', 'EVP_CIPHER_CTX_key_length', 'EVP_CIPHER_CTX_set_key_length', 'evp_aes_ctr_mt', 'EVP_CIPHER_CTX_new', 'EVP_CipherInit', 'cipher_authlen']

356 363 cipher_init call site: 00323 /src/hpn-ssh/cipher.c:361

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 getenv [call site] 00001
1 log_init [function] [call site] 00002
2 log_change_level [function] [call site] 00003
2 fprintf [call site] 00004
2 exit [call site] 00005
2 fprintf [call site] 00006
2 exit [call site] 00007
2 openlog [call site] 00008
2 closelog [call site] 00009
1 xcalloc [function] [call site] 00010
2 sshfatal [function] [call site] 00011
3 sshlogv [function] [call site] 00012
4 strrchr [call site] 00013
4 getpid [call site] 00014
4 snprintf [call site] 00015
4 match_pattern_list [function] [call site] 00016
5 strlen [call site] 00017
5 __ctype_b_loc [call site] 00018
5 tolower [call site] 00019
5 match_pattern [function] [call site] 00020
6 match_pattern [function] [call site] 00021
7 match_pattern [function] [call site] 00022
4 snprintf [call site] 00023
4 snprintf [call site] 00024
4 strlcpy [function] [call site] 00025
4 do_log [function] [call site] 00026
5 __errno_location [call site] 00027
5 snprintf [call site] 00028
5 vsnprintf [call site] 00029
5 vsnprintf [call site] 00030
5 snprintf [call site] 00031
5 strlcpy [function] [call site] 00032
5 strnvis [function] [call site] 00033
6 __ctype_b_loc [call site] 00034
6 vis [function] [call site] 00035
7 __ctype_b_loc [call site] 00036
7 __ctype_b_loc [call site] 00037
6 vis [function] [call site] 00038
5 snprintf [call site] 00039
5 strlen [call site] 00040
5 openlog [call site] 00041
5 closelog [call site] 00042
5 __errno_location [call site] 00043
3 cleanup_exit [function] [call site] 00044
4 _exit [call site] 00045
2 sshfatal [function] [call site] 00046
2 calloc [call site] 00047
2 sshfatal [function] [call site] 00048
1 prepare_keys(shared_state*) [function] [call site] 00049
2 prepare_key(shared_state*, int, int) [function] [call site] 00050
3 abort [call site] 00051
3 strlen [call site] 00052
3 sshbuf_from [function] [call site] 00053
4 calloc [call site] 00054
3 abort [call site] 00055
3 sshkey_parse_private_fileblob [function] [call site] 00056
4 sshkey_parse_private_fileblob_type [function] [call site] 00057
5 sshkey_parse_private2 [function] [call site] 00058
6 private2_uudecode [function] [call site] 00059
7 sshbuf_new_label [function] [call site] 00060
8 calloc [call site] 00061
8 strncpy [call site] 00062
8 calloc [call site] 00063
7 sshbuf_new_label [function] [call site] 00064
7 sshbuf_ptr [function] [call site] 00065
8 sshbuf_check_sanity [function] [call site] 00066
9 ssh_signal [function] [call site] 00067
10 memset [call site] 00068
10 sigfillset [call site] 00069
10 sigaction [call site] 00070
10 strsignal [call site] 00071
10 sshlog [function] [call site] 00072
11 sshlogv [function] [call site] 00073
9 raise [call site] 00074
7 sshbuf_len [function] [call site] 00075
8 sshbuf_check_sanity [function] [call site] 00076
7 memcmp [call site] 00077
7 sshbuf_put_u8 [function] [call site] 00078
8 sshbuf_reserve [function] [call site] 00079
9 sshbuf_allocate [function] [call site] 00080
10 sshbuf_check_reserve [function] [call site] 00081
11 sshbuf_check_sanity [function] [call site] 00082
10 sshbuf_maybe_pack [function] [call site] 00083
10 recallocarray [function] [call site] 00084
11 calloc [call site] 00085
11 __errno_location [call site] 00086
11 getpagesize [call site] 00087
11 memset [call site] 00088
11 memset [call site] 00089
11 explicit_bzero [call site] 00090
10 sshbuf_check_reserve [function] [call site] 00091
7 memcmp [call site] 00092
7 sshbuf_put_u8 [function] [call site] 00093
7 sshbuf_ptr [function] [call site] 00094
7 sshbuf_b64tod [function] [call site] 00095
8 strlen [call site] 00096
8 __b64_pton [function] [call site] 00097
9 __ctype_b_loc [call site] 00098
9 strchr [call site] 00099
9 __ctype_b_loc [call site] 00100
9 __ctype_b_loc [call site] 00101
8 freezero [function] [call site] 00102
9 explicit_bzero [call site] 00103
8 sshbuf_put [function] [call site] 00104
9 sshbuf_reserve [function] [call site] 00105
8 freezero [function] [call site] 00106
8 freezero [function] [call site] 00107
7 sshbuf_len [function] [call site] 00108
7 sshbuf_ptr [function] [call site] 00109
7 memcmp [call site] 00110
7 sshbuf_free [function] [call site] 00111
8 sshbuf_check_sanity [function] [call site] 00112
8 sshbuf_free [function] [call site] 00113
9 explicit_bzero [call site] 00114
9 freezero [function] [call site] 00115
7 sshbuf_free [function] [call site] 00116
6 private2_decrypt [function] [call site] 00117
7 sshbuf_new_label [function] [call site] 00118
7 sshbuf_consume [function] [call site] 00119
8 sshbuf_check_sanity [function] [call site] 00120
8 sshbuf_len [function] [call site] 00121
7 sshbuf_get_cstring [function] [call site] 00122
8 sshbuf_peek_string_direct [function] [call site] 00123
9 sshbuf_ptr [function] [call site] 00124
9 sshbuf_len [function] [call site] 00125
9 sshbuf_len [function] [call site] 00126
8 memchr [call site] 00127
8 sshbuf_get_string_direct [function] [call site] 00128
9 sshbuf_peek_string_direct [function] [call site] 00129
9 sshbuf_consume [function] [call site] 00130
7 sshbuf_get_cstring [function] [call site] 00131
7 sshbuf_froms [function] [call site] 00132
8 sshbuf_peek_string_direct [function] [call site] 00133
8 sshbuf_from [function] [call site] 00134
8 sshbuf_consume [function] [call site] 00135
8 sshbuf_set_parent [function] [call site] 00136
9 sshbuf_check_sanity [function] [call site] 00137
9 sshbuf_check_sanity [function] [call site] 00138
8 sshbuf_free [function] [call site] 00139
7 sshbuf_get_u32 [function] [call site] 00140
8 sshbuf_ptr [function] [call site] 00141
8 sshbuf_consume [function] [call site] 00142
7 sshkey_froms [function] [call site] 00143
8 sshbuf_froms [function] [call site] 00144
8 sshkey_from_blob_internal [function] [call site] 00145
9 sshbuf_fromb [function] [call site] 00146
10 sshbuf_check_sanity [function] [call site] 00147
10 sshbuf_ptr [function] [call site] 00148
10 sshbuf_set_parent [function] [call site] 00149
10 sshbuf_free [function] [call site] 00150
9 sshbuf_get_cstring [function] [call site] 00151
9 sshkey_type_from_name [function] [call site] 00152
10 strcmp [call site] 00153
10 strcasecmp [call site] 00154
9 sshkey_type_is_cert [function] [call site] 00155
10 sshkey_impl_from_type [function] [call site] 00156
9 sshkey_impl_from_type [function] [call site] 00157
9 sshkey_new [function] [call site] 00158
10 sshkey_impl_from_type [function] [call site] 00159
10 calloc [call site] 00160
10 sshkey_is_cert [function] [call site] 00161
11 sshkey_type_is_cert [function] [call site] 00162
10 cert_new [function] [call site] 00163
11 calloc [call site] 00164
11 sshbuf_new_label [function] [call site] 00165
11 sshbuf_new_label [function] [call site] 00166
11 sshbuf_new_label [function] [call site] 00167
11 cert_free [function] [call site] 00168
12 sshbuf_free [function] [call site] 00169
12 sshbuf_free [function] [call site] 00170
12 sshbuf_free [function] [call site] 00171
12 sshkey_free [function] [call site] 00172
13 sshkey_free_contents [function] [call site] 00173
14 sshkey_impl_from_type [function] [call site] 00174
14 sshkey_is_cert [function] [call site] 00175
14 cert_free [function] [call site] 00176
15 freezero [function] [call site] 00177
14 freezero [function] [call site] 00178
14 freezero [function] [call site] 00179
13 freezero [function] [call site] 00180
10 sshkey_free [function] [call site] 00181
9 sshkey_type_is_cert [function] [call site] 00182
9 sshbuf_get_string_direct [function] [call site] 00183
9 sshkey_is_cert [function] [call site] 00184
9 sshbuf_len [function] [call site] 00185
9 sshbuf_free [function] [call site] 00186
9 sshkey_free [function] [call site] 00187
8 sshbuf_free [function] [call site] 00188
7 sshbuf_get_u32 [function] [call site] 00189
7 strcmp [call site] 00190
7 strcpy [call site] 00191
7 cipher_by_name [function] [call site] 00192
7 strcmp [call site] 00193
7 strcmp [call site] 00194
7 strlen [call site] 00195
7 strcmp [call site] 00196
7 cipher_blocksize [function] [call site] 00197
7 cipher_keylen [function] [call site] 00198
7 cipher_ivlen [function] [call site] 00199
7 cipher_authlen [function] [call site] 00200
7 calloc [call site] 00201
7 strcmp [call site] 00202
7 sshbuf_get_string [function] [call site] 00203
8 sshbuf_get_string_direct [function] [call site] 00204
7 sshbuf_get_u32 [function] [call site] 00205
7 strlen [call site] 00206
7 bcrypt_pbkdf [function] [call site] 00207
8 calloc [call site] 00208
8 crypto_hash_sha512 [function] [call site] 00209
9 EVP_sha512 [call site] 00210
8 crypto_hash_sha512 [function] [call site] 00211
8 bcrypt_hash [function] [call site] 00212
9 Blowfish_initstate [function] [call site] 00213
9 Blowfish_expandstate [function] [call site] 00214
10 Blowfish_stream2word [function] [call site] 00215
10 Blowfish_stream2word [function] [call site] 00216
10 Blowfish_stream2word [function] [call site] 00217
10 Blowfish_encipher [function] [call site] 00218
10 Blowfish_stream2word [function] [call site] 00219
10 Blowfish_stream2word [function] [call site] 00220
10 Blowfish_encipher [function] [call site] 00221
9 Blowfish_expand0state [function] [call site] 00222
10 Blowfish_stream2word [function] [call site] 00223
10 Blowfish_encipher [function] [call site] 00224
10 Blowfish_encipher [function] [call site] 00225
9 Blowfish_expand0state [function] [call site] 00226
9 Blowfish_stream2word [function] [call site] 00227
9 blf_enc [function] [call site] 00228
10 Blowfish_encipher [function] [call site] 00229
9 explicit_bzero [call site] 00230
9 explicit_bzero [call site] 00231
9 explicit_bzero [call site] 00232
8 crypto_hash_sha512 [function] [call site] 00233
8 bcrypt_hash [function] [call site] 00234
8 freezero [function] [call site] 00235
8 explicit_bzero [call site] 00236
8 explicit_bzero [call site] 00237
8 arc4random_buf [function] [call site] 00238
9 _rs_random_buf [function] [call site] 00239
10 _rs_stir_if_needed [function] [call site] 00240
11 _rs_forkdetect [function] [call site] 00241
12 getpid [call site] 00242
12 memset [call site] 00243
11 _rs_stir [function] [call site] 00244
12 _ssh_compat_getentropy [function] [call site] 00245
13 RAND_bytes [call site] 00246
13 ERR_get_error [call site] 00247
13 sshfatal [function] [call site] 00248
12 _getentropy_fail [function] [call site] 00249
13 sshfatal [function] [call site] 00250
12 _rs_init [function] [call site] 00251
13 _rs_allocate [function] [call site] 00252
14 mmap [call site] 00253
14 munmap [call site] 00254
13 _exit [call site] 00255
13 chacha_keysetup [function] [call site] 00256
13 chacha_ivsetup [function] [call site] 00257
12 _rs_rekey [function] [call site] 00258
13 chacha_encrypt_bytes [function] [call site] 00259
13 _rs_init [function] [call site] 00260
13 memset [call site] 00261
12 explicit_bzero [call site] 00262
12 chacha_encrypt_bytes [function] [call site] 00263
10 memset [call site] 00264
10 _rs_rekey [function] [call site] 00265
7 sshbuf_len [function] [call site] 00266
7 sshbuf_len [function] [call site] 00267
7 sshbuf_reserve [function] [call site] 00268
7 cipher_init [function] [call site] 00269
8 calloc [call site] 00270
8 cipher_ivlen [function] [call site] 00271
8 chachapoly_new_mt [function] [call site] 00272
9 xmalloc [function] [call site] 00273
10 sshfatal [function] [call site] 00274
10 sshfatal [function] [call site] 00275
9 memset [call site] 00276
9 EVP_MD_CTX_new [call site] 00277
9 EVP_PKEY_new_mac_key [call site] 00278
9 EVP_DigestSignInit [call site] 00279
9 initialize_threadData [function] [call site] 00280
10 EVP_CIPHER_CTX_new [call site] 00281
10 EVP_chacha20 [call site] 00282
10 EVP_chacha20 [call site] 00283
10 EVP_CIPHER_CTX_iv_length [call site] 00284
10 free_threadData [function] [call site] 00285
11 EVP_CIPHER_CTX_free [call site] 00286
11 EVP_CIPHER_CTX_free [call site] 00287
11 explicit_bzero [call site] 00288
9 free_threadData [function] [call site] 00289
9 free_threadData [function] [call site] 00290
9 free_threadData [function] [call site] 00291
9 initialize_threadData [function] [call site] 00292
9 chachapoly_free_mt [function] [call site] 00293
10 EVP_PKEY_free [call site] 00294
10 getpid [call site] 00295
10 join_manager_thread [function] [call site] 00296
11 pthread_join [call site] 00297
11 sshlog [function] [call site] 00298
11 sshlog [function] [call site] 00299
11 sshlog [function] [call site] 00300
11 sshlog [function] [call site] 00301
10 join_manager_thread [function] [call site] 00302
10 free_threadData [function] [call site] 00303
10 freezero [function] [call site] 00304
9 explicit_bzero [call site] 00305
9 generate_keystream [function] [call site] 00306
10 memset [call site] 00307
10 memset [call site] 00308
10 EVP_CipherInit [call site] 00309
10 EVP_CipherInit [call site] 00310
10 EVP_CipherInit [call site] 00311
10 EVP_Cipher [call site] 00312
9 sshlog [function] [call site] 00313
9 free_threadData [function] [call site] 00314
9 chachapoly_free_mt [function] [call site] 00315
9 explicit_bzero [call site] 00316
9 getpid [call site] 00317
9 pthread_self [call site] 00318
9 sshlog [function] [call site] 00319
9 EVP_MD_CTX_free [call site] 00320
9 freezero [function] [call site] 00321
9 explicit_bzero [call site] 00322
8 chachapoly_new [function] [call site] 00323
9 calloc [call site] 00324
9 EVP_CIPHER_CTX_new [call site] 00325
9 EVP_CIPHER_CTX_new [call site] 00326
9 EVP_chacha20 [call site] 00327
9 EVP_chacha20 [call site] 00328
9 chachapoly_free [function] [call site] 00329
10 EVP_CIPHER_CTX_free [call site] 00330
10 EVP_CIPHER_CTX_free [call site] 00331
10 freezero [function] [call site] 00332
8 EVP_CIPHER_CTX_new [call site] 00333
8 strstr [call site] 00334
8 evp_aes_ctr_mt [function] [call site] 00335
9 EVP_CIPHER_meth_new [call site] 00336
9 EVP_CIPHER_meth_set_iv_length [call site] 00337
9 EVP_CIPHER_meth_set_init [call site] 00338
9 ssh_aes_ctr_init [function] [call site] 00339
10 getenv [call site] 00340
10 strlen [call site] 00341
10 atoi [call site] 00342
10 sshlog [function] [call site] 00343
10 EVP_CIPHER_CTX_get_app_data [call site] 00344
10 xmalloc [function] [call site] 00345
10 pthread_rwlock_init [call site] 00346
10 pthread_mutex_init [call site] 00347
10 pthread_cond_init [call site] 00348
10 EVP_CIPHER_CTX_set_app_data [call site] 00349
10 stop_and_join_pregen_threads [function] [call site] 00350
11 sshlog [function] [call site] 00351
11 pthread_cancel [call site] 00352
11 pthread_mutex_lock [call site] 00353
11 pthread_cond_broadcast [call site] 00354
11 pthread_mutex_unlock [call site] 00355
11 pthread_kill [call site] 00356
11 sshlog [function] [call site] 00357
11 sshlog [function] [call site] 00358
11 pthread_mutex_destroy [call site] 00359
11 pthread_cond_destroy [call site] 00360
11 pthread_join [call site] 00361
11 EVP_CIPHER_CTX_free [call site] 00362
11 pthread_rwlock_destroy [call site] 00363
10 EVP_CIPHER_CTX_key_length [call site] 00364
10 EVP_CIPHER_CTX_key_length [call site] 00365
10 ssh_ctr_add [function] [call site] 00366
10 pthread_attr_init [call site] 00367
10 pthread_attr_setstacksize [call site] 00368
10 pthread_rwlock_wrlock [call site] 00369
10 pthread_create [call site] 00370
10 thread_loop [function] [call site] 00371
11 memset [call site] 00372
11 pthread_rwlock_rdlock [call site] 00373
11 pthread_rwlock_unlock [call site] 00374
11 EVP_CIPHER_CTX_new [call site] 00375
11 pthread_self [call site] 00376
11 exit [call site] 00377
11 EVP_aes_256_ctr [call site] 00378
11 EVP_aes_128_ctr [call site] 00379
11 sshlog [function] [call site] 00380
11 exit [call site] 00381
11 pthread_self [call site] 00382
11 pthread_mutex_lock [call site] 00383
11 EVP_EncryptInit_ex [call site] 00384
11 EVP_EncryptUpdate [call site] 00385
11 ssh_ctr_add [function] [call site] 00386
11 pthread_cond_broadcast [call site] 00387
11 pthread_mutex_unlock [call site] 00388
11 pthread_testcancel [call site] 00389
11 pthread_mutex_lock [call site] 00390
11 __sigsetjmp [call site] 00391
11 pthread_cond_wait [call site] 00392
11 __pthread_unregister_cancel [call site] 00393
11 pthread_mutex_unlock [call site] 00394
11 pthread_cond_broadcast [call site] 00395
11 pthread_mutex_unlock [call site] 00396
11 EVP_EncryptInit_ex [call site] 00397
11 EVP_EncryptUpdate [call site] 00398
11 pthread_mutex_lock [call site] 00399
11 ssh_ctr_add [function] [call site] 00400
11 pthread_cond_broadcast [call site] 00401
11 pthread_mutex_unlock [call site] 00402
10 sshfatal [function] [call site] 00403
10 sshlog [function] [call site] 00404
10 pthread_rwlock_unlock [call site] 00405
10 pthread_mutex_lock [call site] 00406
10 pthread_cond_wait [call site] 00407
10 pthread_mutex_unlock [call site] 00408
9 EVP_CIPHER_meth_set_cleanup [call site] 00409
9 ssh_aes_ctr_cleanup [function] [call site] 00410
10 EVP_CIPHER_CTX_get_app_data [call site] 00411
10 stop_and_join_pregen_threads [function] [call site] 00412
10 memset [call site] 00413
10 EVP_CIPHER_CTX_set_app_data [call site] 00414
9 EVP_CIPHER_meth_set_do_cipher [call site] 00415
9 ssh_aes_ctr [function] [call site] 00416
10 EVP_CIPHER_CTX_get_app_data [call site] 00417
10 pthread_mutex_lock [call site] 00418
10 pthread_cond_wait [call site] 00419
10 pthread_cond_broadcast [call site] 00420
10 pthread_mutex_unlock [call site] 00421
10 pthread_mutex_lock [call site] 00422
10 pthread_cond_broadcast [call site] 00423
10 pthread_mutex_unlock [call site] 00424
9 EVP_CIPHER_meth_set_flags [call site] 00425
8 cipher_authlen [function] [call site] 00426
8 EVP_CIPHER_CTX_ctrl [call site] 00427
8 EVP_CIPHER_CTX_key_length [call site] 00428
8 EVP_CIPHER_CTX_set_key_length [call site] 00429
8 EVP_CipherInit [call site] 00430
8 EVP_CIPHER_CTX_free [call site] 00431
8 freezero [function] [call site] 00432
7 sshbuf_ptr [function] [call site] 00433
7 cipher_crypt [function] [call site] 00434
8 chachapoly_crypt_mt [function] [call site] 00435
9 join_manager_thread [function] [call site] 00436
9 EVP_PKEY_CTX_ctrl [call site] 00437
9 sshlog [function] [call site] 00438
9 EVP_DigestSignFinal [call site] 00439
9 sshlog [function] [call site] 00440
9 timingsafe_bcmp [function] [call site] 00441
9 explicit_bzero [call site] 00442
9 fastXOR [function] [call site] 00443
9 EVP_PKEY_CTX_ctrl [call site] 00444
9 EVP_DigestUpdate [call site] 00445
9 sshlog [function] [call site] 00446
9 EVP_DigestSignFinal [call site] 00447
9 sshlog [function] [call site] 00448
9 pthread_create [call site] 00449
9 manager_thread [function] [call site] 00450
10 sshlog [function] [call site] 00451
10 pthread_create [call site] 00452
10 worker_thread [function] [call site] 00453
11 generate_keystream [function] [call site] 00454
10 pthread_self [call site] 00455
10 pthread_join [call site] 00456
10 sshlog [function] [call site] 00457
10 sshlog [function] [call site] 00458
10 sshlog [function] [call site] 00459
10 sshlog [function] [call site] 00460
10 sshlog [function] [call site] 00461
8 chachapoly_crypt [function] [call site] 00462
9 memset [call site] 00463
9 EVP_CipherInit [call site] 00464
9 EVP_Cipher [call site] 00465
9 poly1305_auth [function] [call site] 00466
9 timingsafe_bcmp [function] [call site] 00467
9 EVP_CipherInit [call site] 00468
9 EVP_CipherInit [call site] 00469
9 poly1305_auth [function] [call site] 00470
9 explicit_bzero [call site] 00471
9 explicit_bzero [call site] 00472
9 explicit_bzero [call site] 00473
8 cipher_authlen [function] [call site] 00474
8 EVP_CIPHER_CTX_ctrl [call site] 00475
8 EVP_CIPHER_CTX_ctrl [call site] 00476
8 EVP_Cipher [call site] 00477
8 EVP_Cipher [call site] 00478
8 EVP_Cipher [call site] 00479
8 EVP_CIPHER_CTX_ctrl [call site] 00480
7 sshbuf_consume [function] [call site] 00481
7 sshbuf_len [function] [call site] 00482
7 sshbuf_get_u32 [function] [call site] 00483
7 sshbuf_get_u32 [function] [call site] 00484
7 cipher_free [function] [call site] 00485
8 chachapoly_free_mt [function] [call site] 00486
8 chachapoly_free [function] [call site] 00487
8 explicit_bzero [call site] 00488
8 EVP_CIPHER_meth_free [call site] 00489
8 freezero [function] [call site] 00490
7 sshkey_free [function] [call site] 00491
7 explicit_bzero [call site] 00492
7 explicit_bzero [call site] 00493
7 sshbuf_free [function] [call site] 00494
7 sshbuf_free [function] [call site] 00495
6 sshkey_type_plain [function] [call site] 00496
6 sshkey_private_deserialize [function] [call site] 00497
7 sshbuf_get_cstring [function] [call site] 00498
7 sshkey_type_from_name [function] [call site] 00499
7 sshkey_type_is_cert [function] [call site] 00500
7 sshkey_froms [function] [call site] 00501
7 sshkey_ecdsa_nid_from_name [function] [call site] 00502
8 key_type_is_ecdsa_variant [function] [call site] 00503
7 sshkey_new [function] [call site] 00504
7 sshkey_impl_from_type [function] [call site] 00505
7 strcmp [call site] 00506
7 memcmp [call site] 00507
7 sshkey_free [function] [call site] 00508
6 sshbuf_get_cstring [function] [call site] 00509
6 private2_check_padding [function] [call site] 00510
7 sshbuf_len [function] [call site] 00511
7 sshbuf_get_u8 [function] [call site] 00512
8 sshbuf_ptr [function] [call site] 00513
8 sshbuf_consume [function] [call site] 00514
7 explicit_bzero [call site] 00515
7 explicit_bzero [call site] 00516
6 sshkey_equal [function] [call site] 00517
7 sshkey_is_cert [function] [call site] 00518
7 cert_compare [function] [call site] 00519
8 sshbuf_len [function] [call site] 00520
8 sshbuf_ptr [function] [call site] 00521
8 sshbuf_len [function] [call site] 00522
8 timingsafe_bcmp [function] [call site] 00523
7 sshkey_equal_public [function] [call site] 00524
8 sshkey_type_plain [function] [call site] 00525
8 sshkey_impl_from_type [function] [call site] 00526
6 sshbuf_free [function] [call site] 00527
6 sshbuf_free [function] [call site] 00528
6 sshkey_free [function] [call site] 00529
6 sshkey_free [function] [call site] 00530
5 sshkey_parse_private2 [function] [call site] 00531
5 sshkey_parse_private_pem_fileblob [function] [call site] 00532
6 BIO_s_mem [call site] 00533
6 sshbuf_len [function] [call site] 00534
6 sshbuf_ptr [function] [call site] 00535
6 BIO_write [call site] 00536
6 sshbuf_len [function] [call site] 00537
6 clear_libcrypto_errors [function] [call site] 00538
7 ERR_get_error [call site] 00539
6 PEM_read_bio_PrivateKey [call site] 00540
6 pem_passphrase_cb [function] [call site] 00541
7 strlen [call site] 00542
6 convert_libcrypto_error [function] [call site] 00543
7 ERR_peek_error [call site] 00544
7 translate_libcrypto_error [function] [call site] 00545
7 ERR_peek_last_error [call site] 00546
7 translate_libcrypto_error [function] [call site] 00547
6 EVP_PKEY_base_id [call site] 00548
6 sshkey_new [function] [call site] 00549
6 EVP_PKEY_get1_RSA [call site] 00550
6 RSA_blinding_on [call site] 00551
6 sshkey_check_rsa_length [function] [call site] 00552
7 RSA_get0_key [call site] 00553
7 BN_num_bits [call site] 00554
6 EVP_PKEY_base_id [call site] 00555
6 sshkey_new [function] [call site] 00556
6 EVP_PKEY_get1_DSA [call site] 00557
6 EVP_PKEY_base_id [call site] 00558
6 sshkey_new [function] [call site] 00559
6 EVP_PKEY_get1_EC_KEY [call site] 00560
6 sshkey_ecdsa_key_to_nid [function] [call site] 00561
7 EC_KEY_get0_group [call site] 00562
7 EC_GROUP_get_curve_name [call site] 00563
7 EC_GROUP_new_by_curve_name [call site] 00564
7 EC_GROUP_cmp [call site] 00565
7 EC_GROUP_free [call site] 00566
7 EC_GROUP_set_asn1_flag [call site] 00567
7 EC_KEY_set_group [call site] 00568
7 EC_GROUP_free [call site] 00569
6 sshkey_curve_nid_to_name [function] [call site] 00570
6 EC_KEY_get0_group [call site] 00571
6 EC_KEY_get0_public_key [call site] 00572
6 sshkey_ec_validate_public [function] [call site] 00573
7 EC_GROUP_method_of [call site] 00574
7 EC_POINT_is_at_infinity [call site] 00575
7 BN_new [call site] 00576
7 BN_new [call site] 00577
7 BN_new [call site] 00578
7 BN_new [call site] 00579
7 EC_GROUP_get_order [call site] 00580
7 EC_POINT_get_affine_coordinates_GFp [call site] 00581
7 BN_num_bits [call site] 00582
7 BN_num_bits [call site] 00583
7 EC_POINT_new [call site] 00584
7 EC_POINT_mul [call site] 00585
7 EC_POINT_is_at_infinity [call site] 00586
7 BN_value_one [call site] 00587
7 BN_cmp [call site] 00588
7 BN_clear_free [call site] 00589
7 BN_clear_free [call site] 00590
7 BN_clear_free [call site] 00591
7 BN_clear_free [call site] 00592
7 EC_POINT_free [call site] 00593
6 sshkey_ec_validate_private [function] [call site] 00594
7 EC_KEY_get0_group [call site] 00595
7 EC_KEY_get0_private_key [call site] 00596
7 BN_num_bits [call site] 00597
7 BN_value_one [call site] 00598
7 EC_KEY_get0_private_key [call site] 00599
7 BN_clear_free [call site] 00600
7 BN_clear_free [call site] 00601
6 BIO_free [call site] 00602
6 EVP_PKEY_free [call site] 00603
6 sshkey_free [function] [call site] 00604
3 ssh_err [function] [call site] 00605
4 __errno_location [call site] 00606
3 sshlog [function] [call site] 00607
3 abort [call site] 00608
3 sshbuf_free [function] [call site] 00609
3 xstrdup [function] [call site] 00610
4 strlen [call site] 00611
4 xmalloc [function] [call site] 00612
3 sshkey_new [function] [call site] 00613
3 abort [call site] 00614
3 sshkey_read [function] [call site] 00615
4 sshkey_impl_from_type [function] [call site] 00616
4 strcspn [call site] 00617
4 strlen [call site] 00618
4 peek_type_nid [function] [call site] 00619
5 strlen [call site] 00620
5 memcmp [call site] 00621
5 key_type_is_ecdsa_variant [function] [call site] 00622
4 sshbuf_new_label [function] [call site] 00623
4 strcspn [call site] 00624
4 strndup [call site] 00625
4 sshbuf_free [function] [call site] 00626
4 sshbuf_b64tod [function] [call site] 00627
4 sshbuf_free [function] [call site] 00628
4 sshkey_fromb [function] [call site] 00629
5 sshkey_from_blob_internal [function] [call site] 00630
4 sshbuf_free [function] [call site] 00631
4 sshbuf_free [function] [call site] 00632
4 sshkey_free [function] [call site] 00633
4 key_type_is_ecdsa_variant [function] [call site] 00634
4 sshkey_free [function] [call site] 00635
4 sshkey_free_contents [function] [call site] 00636
4 freezero [function] [call site] 00637
3 ssh_err [function] [call site] 00638
3 sshlog [function] [call site] 00639
3 abort [call site] 00640
3 store_key(shared_state*, sshkey*, sshkey*) [function] [call site] 00641
4 abort [call site] 00642
4 xrecallocarray [function] [call site] 00643
5 recallocarray [function] [call site] 00644
5 sshfatal [function] [call site] 00645
4 xrecallocarray [function] [call site] 00646
4 sshkey_ssh_name [function] [call site] 00647
5 sshkey_ssh_name_from_type_nid [function] [call site] 00648
6 sshkey_impl_from_type_nid [function] [call site] 00649
4 sshlog [function] [call site] 00650
2 prepare_key(shared_state*, int, int) [function] [call site] 00651
2 prepare_key(shared_state*, int, int) [function] [call site] 00652
2 prepare_key(shared_state*, int, int) [function] [call site] 00653
2 sshlog [function] [call site] 00654
1 xcalloc [function] [call site] 00655
1 sshbuf_new_label [function] [call site] 00656
1 sshbuf_put [function] [call site] 00657
1 sshbuf_put [function] [call site] 00658
1 sshbuf_put [function] [call site] 00659
1 abort [call site] 00660
1 kex_tests(shared_state*, test_state*) [function] [call site] 00661
2 do_kex(shared_state*, test_state*, char const*) [function] [call site] 00662
3 do_kex_with_key(shared_state*, test_state*, char const*, int) [function] [call site] 00663
4 sshbuf_fromb [function] [call site] 00664
4 abort [call site] 00665
4 sshbuf_fromb [function] [call site] 00666
4 abort [call site] 00667
4 get_pubkey(shared_state*, int) [function] [call site] 00668
5 abort [call site] 00669
4 get_privkey(shared_state*, int) [function] [call site] 00670
5 abort [call site] 00671
4 sshkey_ssh_name [function] [call site] 00672
4 xstrdup [function] [call site] 00673
4 sshbuf_len [function] [call site] 00674
4 sshlog [function] [call site] 00675
4 sshbuf_len [function] [call site] 00676
4 sshlog [function] [call site] 00677
4 sshlog [function] [call site] 00678
4 strdup [call site] 00679
4 sshlog [function] [call site] 00680
4 ssh_init [function] [call site] 00681
5 seed_rng [function] [call site] 00682
6 ssh_libcrypto_init [function] [call site] 00683
7 OPENSSL_init_crypto [call site] 00684
6 OpenSSL_version_num [call site] 00685
6 ssh_compatible_openssl [function] [call site] 00686
6 sshfatal [function] [call site] 00687
6 RAND_status [call site] 00688
6 sshfatal [function] [call site] 00689
6 arc4random_buf [function] [call site] 00690
5 ssh_packet_set_connection [function] [call site] 00691
6 cipher_by_name [function] [call site] 00692
6 sshlog [function] [call site] 00693
6 ssh_alloc_session_state [function] [call site] 00694
7 calloc [call site] 00695
7 kex_new [function] [call site] 00696
8 calloc [call site] 00697
8 sshbuf_new_label [function] [call site] 00698
8 sshbuf_new_label [function] [call site] 00699
8 sshbuf_new_label [function] [call site] 00700
8 sshbuf_new_label [function] [call site] 00701
8 sshbuf_new_label [function] [call site] 00702
8 kex_free [function] [call site] 00703
9 DH_free [call site] 00704
9 EC_KEY_free [call site] 00705
9 kex_free_newkeys [function] [call site] 00706
10 explicit_bzero [call site] 00707
10 explicit_bzero [call site] 00708
10 explicit_bzero [call site] 00709
10 explicit_bzero [call site] 00710
10 mac_clear [function] [call site] 00711
11 umac_delete [function] [call site] 00712
12 freezero [function] [call site] 00713
11 umac128_delete [function] [call site] 00714
11 ssh_hmac_free [function] [call site] 00715
12 ssh_digest_free [function] [call site] 00716
13 EVP_MD_CTX_free [call site] 00717
13 freezero [function] [call site] 00718
12 ssh_digest_free [function] [call site] 00719
12 ssh_digest_free [function] [call site] 00720
12 freezero [function] [call site] 00721
10 explicit_bzero [call site] 00722
10 explicit_bzero [call site] 00723
10 freezero [function] [call site] 00724
9 sshbuf_free [function] [call site] 00725
9 sshbuf_free [function] [call site] 00726
9 sshbuf_free [function] [call site] 00727
9 sshbuf_free [function] [call site] 00728
9 sshbuf_free [function] [call site] 00729
9 sshbuf_free [function] [call site] 00730
9 sshbuf_free [function] [call site] 00731
9 sshkey_free [function] [call site] 00732
7 sshbuf_new_label [function] [call site] 00733
7 sshbuf_new_label [function] [call site] 00734
7 sshbuf_new_label [function] [call site] 00735
7 sshbuf_new_label [function] [call site] 00736
7 sshbuf_relabel [function] [call site] 00737
7 sshbuf_type [function] [call site] 00738
7 sshbuf_relabel [function] [call site] 00739
7 sshbuf_type [function] [call site] 00740
7 sshbuf_relabel [function] [call site] 00741
7 sshbuf_type [function] [call site] 00742
7 sshbuf_relabel [function] [call site] 00743
7 sshbuf_type [function] [call site] 00744
7 kex_free [function] [call site] 00745
7 sshbuf_free [function] [call site] 00746
7 sshbuf_free [function] [call site] 00747
7 sshbuf_free [function] [call site] 00748
7 sshbuf_free [function] [call site] 00749
6 sshlog [function] [call site] 00750
6 cipher_init [function] [call site] 00751
6 ssh_err [function] [call site] 00752
6 sshlog [function] [call site] 00753
6 ssh_remote_ipaddr [function] [call site] 00754
7 ssh_packet_connection_is_on_socket [function] [call site] 00755
8 memset [call site] 00756
8 getpeername [call site] 00757
8 memset [call site] 00758
8 memcmp [call site] 00759
7 get_peer_ipaddr [function] [call site] 00760
8 get_socket_address [function] [call site] 00761
9 getsockname [call site] 00762
9 ipv64_normalise_mapped [function] [call site] 00763
10 htonl [call site] 00764
10 sshlog [function] [call site] 00765
9 getnameinfo [call site] 00766
9 ssh_gai_strerror [function] [call site] 00767
10 __errno_location [call site] 00768
10 gai_strerror [call site] 00769
9 sshlog [function] [call site] 00770
9 xstrdup [function] [call site] 00771
9 xstrdup [function] [call site] 00772
8 xstrdup [function] [call site] 00773
7 get_peer_port [function] [call site] 00774
8 get_sock_port [function] [call site] 00775
9 getsockname [call site] 00776
9 sshlog [function] [call site] 00777
9 getpeername [call site] 00778
9 sshlog [function] [call site] 00779
9 ssh_gai_strerror [function] [call site] 00780
9 sshfatal [function] [call site] 00781
9 atoi [call site] 00782
7 get_local_ipaddr [function] [call site] 00783
8 get_socket_address [function] [call site] 00784
8 xstrdup [function] [call site] 00785
7 get_local_port [function] [call site] 00786
8 get_sock_port [function] [call site] 00787
7 xstrdup [function] [call site] 00788
7 xstrdup [function] [call site] 00789
5 ssh_packet_set_server [function] [call site] 00790
5 kex_proposal_populate_entries [function] [call site] 00791
6 sshfatal [function] [call site] 00792
6 kex_names_cat [function] [call site] 00793
7 strdup [call site] 00794
7 strlen [call site] 00795
7 strlen [call site] 00796
7 strdup [call site] 00797
7 strlcpy [function] [call site] 00798
7 has_any_alg [function] [call site] 00799
8 match_list [function] [call site] 00800
9 xstrdup [function] [call site] 00801
9 xstrdup [function] [call site] 00802
9 strsep [call site] 00803
9 strsep [call site] 00804
9 strcmp [call site] 00805
9 xstrdup [function] [call site] 00806
9 strsep [call site] 00807
9 strlen [call site] 00808
7 strlcat [function] [call site] 00809
8 strlen [call site] 00810
7 strlcat [function] [call site] 00811
6 sshfatal [function] [call site] 00812
6 compat_kex_proposal [function] [call site] 00813
7 xstrdup [function] [call site] 00814
7 match_filter_denylist [function] [call site] 00815
8 filter_list [function] [call site] 00816
9 strdup [call site] 00817
9 match_pattern_list [function] [call site] 00818
9 strlcat [function] [call site] 00819
9 strlcat [function] [call site] 00820
7 sshfatal [function] [call site] 00821
7 match_filter_denylist [function] [call site] 00822
7 sshfatal [function] [call site] 00823
7 sshfatal [function] [call site] 00824
7 sshlog [function] [call site] 00825
6 xstrdup [function] [call site] 00826
6 xstrdup [function] [call site] 00827
6 xstrdup [function] [call site] 00828
6 xstrdup [function] [call site] 00829
6 xstrdup [function] [call site] 00830
5 kex_ready [function] [call site] 00831
6 patch_list [function] [call site] 00832
7 xstrdup [function] [call site] 00833
7 match_list [function] [call site] 00834
7 match_list [function] [call site] 00835
7 strlen [call site] 00836
7 strlen [call site] 00837
7 xreallocarray [function] [call site] 00838
8 sshfatal [function] [call site] 00839
7 strlen [call site] 00840
7 strlen [call site] 00841
7 strlen [call site] 00842
6 patch_list [function] [call site] 00843
6 kex_prop2buf [function] [call site] 00844
7 sshbuf_reset [function] [call site] 00845
8 sshbuf_check_sanity [function] [call site] 00846
8 recallocarray [function] [call site] 00847
8 explicit_bzero [call site] 00848
7 sshbuf_put_u8 [function] [call site] 00849
7 sshbuf_put_cstring [function] [call site] 00850
8 strlen [call site] 00851
8 sshbuf_put_string [function] [call site] 00852
9 sshbuf_reserve [function] [call site] 00853
7 sshbuf_put_u8 [function] [call site] 00854
7 sshbuf_put_u32 [function] [call site] 00855
8 sshbuf_reserve [function] [call site] 00856
6 kex_reset_dispatch [function] [call site] 00857
7 ssh_dispatch_range [function] [call site] 00858
7 kex_protocol_error [function] [call site] 00859
8 ssh_packet_disconnect [function] [call site] 00860
9 sshfatal [function] [call site] 00861
9 sshpkt_fmt_connection_id [function] [call site] 00862
10 ssh_remote_ipaddr [function] [call site] 00863
10 snprintf [call site] 00864
9 vsnprintf [call site] 00865
9 sshlog [function] [call site] 00866
9 sshpkt_disconnect [function] [call site] 00867
10 vsnprintf [call site] 00868
10 sshlog [function] [call site] 00869
10 sshpkt_start [function] [call site] 00870
11 memset [call site] 00871
11 sshbuf_reset [function] [call site] 00872
11 sshbuf_put [function] [call site] 00873
10 sshpkt_put_u32 [function] [call site] 00874
11 sshbuf_put_u32 [function] [call site] 00875
10 sshpkt_put_cstring [function] [call site] 00876
11 sshbuf_put_cstring [function] [call site] 00877
10 sshpkt_put_cstring [function] [call site] 00878
10 sshpkt_send [function] [call site] 00879
11 ssh_packet_send_mux [function] [call site] 00880
12 sshbuf_len [function] [call site] 00881
12 sshbuf_mutable_ptr [function] [call site] 00882
13 sshbuf_check_sanity [function] [call site] 00883
12 ssh_packet_log_type [function] [call site] 00884
12 sshlog [function] [call site] 00885
12 sshbuf_putb [function] [call site] 00886
13 sshbuf_ptr [function] [call site] 00887
13 sshbuf_put [function] [call site] 00888
12 sshbuf_reset [function] [call site] 00889
11 ssh_packet_send2 [function] [call site] 00890
12 sshbuf_len [function] [call site] 00891
12 sshbuf_ptr [function] [call site] 00892
12 ssh_packet_type_is_kex [function] [call site] 00893
12 sshbuf_len [function] [call site] 00894
12 ssh_packet_need_rekeying [function] [call site] 00895
13 ssh_packet_is_rekeying [function] [call site] 00896
13 sshlog [function] [call site] 00897
13 monotime [function] [call site] 00898
14 monotime_ts [function] [call site] 00899
15 clock_gettime [call site] 00900
15 clock_gettime [call site] 00901
15 clock_gettime [call site] 00902
15 __errno_location [call site] 00903
15 sshlog [function] [call site] 00904
15 gettimeofday [call site] 00905
12 ssh_packet_type_is_kex [function] [call site] 00906
12 sshlog [function] [call site] 00907
12 sshlog [function] [call site] 00908
12 calloc [call site] 00909
12 sshbuf_new_label [function] [call site] 00910
12 kex_start_rekex [function] [call site] 00911
13 sshlog [function] [call site] 00912
13 sshlog [function] [call site] 00913