Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: JsonUtilFuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 15 65.2%
gold [1:9] 7 30.4%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 1 4.34%
All colors 23 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
8 14 [org.jose4j.json.internal.json_simple.parser.Yylex]. (java.io.Reader) call site: 00014 [org.jose4j.json.internal.json_simple.parser.JSONParser].parse(String,org.jose4j.json.internal.json_simple.parser.ContainerFactory)
4 4 [org.jose4j.json.internal.json_simple.parser.JSONParser]. () call site: 00004 [org.jose4j.json.internal.json_simple.parser.Yylex].zzUnpackCMap(String)
1 2 [com.example.JsonUtilFuzzer].myFuzzTest(com.code_intelligence.jazzer.api.FuzzedDataProvider) call site: 00002
1 9 [org.jose4j.json.internal.json_simple.parser.Yylex].zzUnpackAction() call site: 00009 [org.jose4j.json.internal.json_simple.parser.Yylex].zzUnpackRowMap()
1 11 [org.jose4j.json.internal.json_simple.parser.Yylex].zzUnpackRowMap() call site: 00011 [org.jose4j.json.internal.json_simple.parser.Yylex].zzUnpackAttribute()

Runtime coverage analysis

Covered functions
41
Functions that are reachable but not covered
8
Reachable functions
10
Percentage of reachable functions covered
20.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
fuzz-targets/src/test/java/com/example/JsonUtilFuzzer.java 3
jose4j/src/main/java/org/jose4j/json/JsonUtil.java 4
jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/JSONParser.java 4
jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/Yylex.java 9
jose4j/src/main/java/org/jose4j/lang/JoseException.java 1

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
[org.jose4j.jca.ProviderContextTest].testGeneralDefaulting() 42 0 0.0% []
[org.jose4j.jca.ProviderContextTest].kindaLameTestForNonexistentProviderJweDirAesMac() 34 0 0.0% []
[org.jose4j.jca.ProviderContextTest].kindaLameTestForNonexistentProviderJweEc() 35 0 0.0% []
[org.jose4j.jca.ProviderContextTest].kindaLameTestForSelectingProviderForContentEncCbcHmac() 32 0 0.0% []
[org.jose4j.keys.ExampleEcKeysFromJws]. () 31 0 0.0%
[org.jose4j.jwt.NumericDateTest].tooBigTooSmall() 35 0 0.0% []
[org.jose4j.jwt.JwtClaimsTest].testGettingHelpers() 32 0 0.0% []
[org.jose4j.jwt.JwtClaimsTest].testSomeSettingAndGettingHelpers() 43 0 0.0% []
[org.jose4j.json.internal.json_simple.JSONValue].writeJSONString(java.lang.Object,java.io.Writer) 65 0 0.0%
[org.jose4j.jwa.AlgorithmFactoryFactory].initialize() 55 0 0.0% []
[org.jose4j.jwe.RsaKeyManagementMoreTest].testSomeDecryptingWithTwoProviders() 31 0 0.0% []
[org.jose4j.jwe.RsaKeyManagementMoreTest].someNegativeInputs() 37 0 0.0% []
[org.jose4j.jwe.Pbes2ExampleEncryptedRSAPrivateKeyJwkAppendixCTest].encryptExample() 33 0 0.0% []
[org.jose4j.jwe.InvalidCurveTest].testRejectInvalidCurve() 35 0 0.0% []
[org.jose4j.jwe.Aes128CbcHmacSha256ContentEncryptionAlgorithmTest].testIntegerOverflow() 33 0 0.0% []
[org.jose4j.jwe.XEcdhTest].rfc8037appendixA6() 35 0 0.0% []
[org.jose4j.jwe.XEcdhTest].rfc8037appendixA7() 35 0 0.0% []
[org.jose4j.jwe.JweCryptoPrimitiveTest].exerciseTheApi() 125 0 0.0% []
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64].encode(byte[],int,int,org.jose4j.base64url.internal.apache.commons.codec.binary.BaseNCodec$Context) 44 0 0.0%
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64].decode(byte[],int,int,org.jose4j.base64url.internal.apache.commons.codec.binary.BaseNCodec$Context) 32 0 0.0%
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64Test].testSingletons() 109 0 0.0% []
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64Test].testSingletonsChunked() 106 0 0.0% []
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64Test].testTriplets() 65 0 0.0% []
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64Test].testTripletsChunked() 65 0 0.0% []
[org.jose4j.base64url.internal.apache.commons.codec.binary.Base64Test].testUUID() 39 0 0.0% []
[org.jose4j.json.internal.json_simple.parser.JSONParser].parse(java.io.Reader,org.jose4j.json.internal.json_simple.parser.ContentHandler,boolean) 121 0 0.0% []
[org.jose4j.jwk.RsaJsonWebKeyTest].doKeyWithCrtPrivateAndBackAndAgain(java.lang.String) 35 0 0.0%
[org.jose4j.jwk.DecryptionJwkSelectorTest].someKidSelections() 43 0 0.0% []
[org.jose4j.jwk.VerificationJwkSelectorTest].uniqueKidTests() 49 0 0.0% []
[org.jose4j.jwk.VerificationJwkSelectorTest].uniqueKidTestsMicrosoftJwksEndpoint() 53 0 0.0% []
[org.jose4j.jwk.VerificationJwkSelectorTest].uniqueKidTestsGluuJwksEndpoint() 69 0 0.0% []
[org.jose4j.jwk.VerificationJwkSelectorTest].notUniqueKidSoDisambiguateByUseKtyTests() 43 0 0.0% []
[org.jose4j.jwk.VerificationJwkSelectorTest].selectWithVerifySignatureDisambiguate() 47 0 0.0% []
[org.jose4j.cookbook.JoseCookbookTest].detached_4_5() 35 0 0.0% []
[org.jose4j.keys.resolvers.HttpsJwksVerificationKeyResolverTest].simpleKeyFoundThenNotFoundAndRefreshToFindAndThenCantFind() 51 0 0.0% []
[org.jose4j.keys.resolvers.HttpsJwksVerificationKeyResolverTest].selectWithVerifySignatureDisambiguate() 50 0 0.0% []
[org.jose4j.examples.ExamplesTest].rfc8037nestedJwtRoundTripExample() 60 0 0.0% []
[org.jose4j.examples.ExamplesTest].nestedJwtRoundTripExample() 57 0 0.0% []
[org.jose4j.examples.ExamplesTest].jwtRoundTripExample() 73 0 0.0% []
[org.jose4j.jws.JwsCryptoPrimitiveTest].exerciseTheApi() 53 0 0.0% []
[org.jose4j.jws.JwsTestSupport].testBasicRoundTrip(java.lang.String,java.lang.String,java.security.Key,java.security.Key,java.security.Key,java.security.Key) 39 0 0.0%
[org.jose4j.jws.RsaPssTest].roundTrips() 32 0 0.0% []
[org.jose4j.jws.JwsUnencodedPayloadOptionTest].testExamplesFromDraftEvenWithoutDirectSupportForTheHeader() 32 0 0.0% []
[org.jose4j.jws.PublicKeyAsHmacKeyTest].tryPubKeyAsHmacTrick() 31 0 0.0% []
[org.jose4j.jws.GetPayloadTest].testGetPayloadVerifiedAndUnverifiedAndSysPropOverride() 35 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerBuilder].build() 37 0 0.0% []
[org.jose4j.jwt.consumer.NumericDateValidator].validate(org.jose4j.jwt.consumer.JwtContext) 37 0 0.0% []
[org.jose4j.jwt.consumer.JwksDecryptionKeyResolverUsingJwtConsumerTest].testResolveOkpKey() 35 0 0.0% []
[org.jose4j.jwt.consumer.JwksDecryptionKeyResolverUsingJwtConsumerTest].testSymmetricKeysWithDir() 36 0 0.0% []
[org.jose4j.jwt.consumer.JwksDecryptionKeyResolverUsingJwtConsumerTest].simpleSymmetricDecryptionKeysWithDisambiguate() 49 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumer].processContext(org.jose4j.jwt.consumer.JwtContext) 66 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumer].process(java.lang.String) 48 0 0.0%
[org.jose4j.jwt.consumer.JwtConsumerTest].jwt61ExampleUnsecuredJwt() 64 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].jwtA2ExampleNestedJWT() 64 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].jwtSec31ExampleJWT() 31 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].algConstraints() 117 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].customErrorCodeValidatorTest() 33 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].varietyOfErrorCodeValidation() 91 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].missingCtyInNested() 39 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].ctyValueVariationsInNested() 90 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].ctyRoundTrip() 47 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].tripleNesting() 33 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].testExplicitTyping() 186 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].testOnlyEncrypted() 45 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].ifItWereAnIdTokenHint() 36 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].roundTripWithMoreLiveDateChecks() 77 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].someIatOverflowsOrNearOnes() 69 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].someOtherOverflowsOrNearOnes() 48 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].iatReasonableness() 90 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].requireIntegrityOption() 201 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].someBasicAudChecks() 47 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].someBasicIssChecks() 53 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].someBasicTimeChecks() 60 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].customizationCallbacksWithCritHeaders() 40 0 0.0% []
[org.jose4j.jwt.consumer.JwtConsumerTest].testSkipVerificationKeyResolutionOnNone() 41 0 0.0% []
[org.jose4j.jwt.consumer.X509VerificationKeyResolverInJwtConsumerTest].noThumbHeader() 44 0 0.0% []
[org.jose4j.jwt.consumer.JwksVerificationKeyResolverUsingJwtConsumerTest].disambiguateWithSignatureCheckOption() 46 0 0.0% []

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/JSONStreamAware.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/SimpleAeadCipher.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/KeyPairUtilTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/ContentEncryptionKeys.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/DefaultByteGenerator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JtiValidator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/ParseException.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/lang/MathsTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/Pbkdf2JwkExampleTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/SimpleKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/StringUtil.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/EllipticCurveJsonWebKeyTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/JwksVerificationKeyResolverUsingJwtConsumerTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/KeyManagementAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/Pbkdf2CompareToJavaSecretKeyFactorySha1Test.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/EcdsaUsingShaAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsPlaintextTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwa/JceProviderTestSupport.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/OctJwkGeneratorTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/InvalidJwtException.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/CritHeaderTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jca/ProviderContextTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsUsingEcdsaP256Sha256ExampleTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsCryptoPrimitiveTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/CompactSerialization.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/RsaJwkGeneratorTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/http/Response.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/RsaUsingShaAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/RsaKeyManagementMoreTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwx/CompactSerializerTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/RsaKeyUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/NumericDate.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/HashUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/CipherUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/InitializationVectorHelp.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/UnsecuredNoneAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/lang/ByteUtilTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/HmacUsingShaAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/XDHKeyUtil.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/BigEndianBigIntegerTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/JweCryptoPrimitiveTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/CryptoPrimitive.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JwtContext.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/Rfc6070Pbkdf2TestVectorsTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/mac/MacUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/AesKeyWrapManagementAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/BaseSignatureAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/AlgorithmConstraints.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/IntDate.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/HttpsJwks.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Pbes2ExampleEncryptedRSAPrivateKeyJwkAppendixCTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/VerificationJwkSelectorTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/IssValidator.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/HttpsJwksTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/ByteGenerator.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsTestSupport.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/GeneralAudValidator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/RsaJsonWebKey.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/ErrorCodeValidatorAdapter.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/StrictAudValidator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/JsonHelp.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/JsonUtil.java ['JsonUtilFuzzer'] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JwtConsumer.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/EllipticCurvesTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/AlgorithmFactory.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/JsonWebEncryptionTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsUsingRsaSha256ExampleTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/X5cTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/JSONParser.java ['JsonUtilFuzzer'] ['JsonUtilFuzzer']
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/MaintainEncodedPayloadAndHeaderTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/EdDsaTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/AzureActiveDirectorySamples.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/DirectKeyManagementAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/CipherStrengthSupport.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/ExtraJwkParametersTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwx/JsonWebStructureTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/SimpleJwtConsumerTestHelp.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/ContentEncryptionHelp.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Aes256GcmContentEncryptionAlgorithmTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/EdDsaKeyUtil.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/JwtConsumerTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/CritHeaderTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Pbes2HmacShaWithAesKeyWrapAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/DecryptionJwkSelectorTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/NumericDateTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/examples/ExamplesTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwa/AlgorithmConstraintsTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/Maths.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/ConcatKeyDerivationFunctionTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/ConcatenationKeyDerivationFunctionWithSha256.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/JsonWebStructure.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/EllipticCurves.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/DecryptionKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/KdfUtil.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Rsa1_5KeyManagementAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/HmacShaTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/Yytoken.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/http/GetTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/RsaPssTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsUsingHmacSha256ExampleTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/AesGcmKeyEncryptionAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Aes128CbcHmacSha256ContentEncryptionAlgorithmTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/JsonHeaderUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jca/ProviderContext.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/EcdhKeyAgreementAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/JwkGlitchesInDeploymentTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/NumericDateValidator.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/JsonWebKeyTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/VerificationJwkSelector.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/Base64Url.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/JsonWebSignatureAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/Pbkdf2MoreTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/OkpJwkGenerator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/KeyPairUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/AesCbcHmacSha2ContentEncryptionAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/DetachedContentTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/EllipticCurveJsonWebKey.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/EcJwkGenerator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/ContainerFactory.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/ChangingKeyTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/base64url/internal/apache/commons/codec/binary/Base64TestData.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/JwksVerificationKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/EdDsaAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/Base64.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/RsaOaepKeyManagementAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/FakeHsmNonExtractableSecretKeySpec.java [] []
/src/project-parent/fuzz-targets/src/test/java/com/example/JsonUtilFuzzer.java ['JsonUtilFuzzer'] ['JsonUtilFuzzer']
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/ContentHandler.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/XEcdhTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/AesGcmContentEncryptionAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/CompactSerializer.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/InvalidCurveTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/ConcatKeyDerivationFunction.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/zip/DeflateRFC1951CompressionAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/DecryptionJwkSelector.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/EcJwkGeneratorTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/KeyValidationSupport.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/http/SimpleGet.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/AudValidator.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/RsaUsingShaTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/cookbook/JoseCookbookTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/GoogsTooSmallKeyJwtConsumerTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/EmbeddedJwkVerificationKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/BouncyCastleProviderHelp.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/JsonWebKeySet.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/SimpleJwkFilter.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/NegativeJweKeyTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/ExceptionHelp.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/base64url/internal/apache/commons/codec/binary/Base64Test.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/Aes128KeyWrapManagementAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/EcdsaUsingShaEdgesTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/internal/apache/commons/codec/binary/BaseNCodec.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/EcdhKeyAgreementWithAesKeyWrapAlgorithmTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/WrappingKeyManagementAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/ContentEncryptionParts.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/http/SimpleResponse.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/PasswordBasedKeyDerivationFunction2.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/ConcatKeyDerivationFunctionFactory.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/JsonWebKeySetTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/EcdsaUsingShaTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/OctetSequenceJsonWebKeyTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/Yylex.java ['JsonUtilFuzzer'] ['JsonUtilFuzzer']
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/PublicKeyAsHmacKeyTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JwtConsumerBuilder.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/X509VerificationKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/JwtClaims.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/internal/apache/commons/codec/binary/Base64.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/RsaJsonWebKeyTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/OctetKeyPairUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/EcdhKeyAgreementWithAesKeyWrapAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/RsaJwkGenerator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/JSONObject.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JweCustomizer.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/JSONArray.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/JwksDecryptionKeyResolver.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/Rfc7638JwkThumbprintTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/JwsCustomizer.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/ErrorCodeValidator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/JSONValue.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/JsonWebKeySetAnotherTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/json/JsonUtilTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/JsonWebSignature.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/JSONAware.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/X509VerificationKeyResolverInJwtConsumerTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/ExamplesFromOpenIdConnectTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/X509Util.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/JwksDecryptionKeyResolverUsingJwtConsumerTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/SimplePEMEncoder.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/HttpsJwksVerificationKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/RsaKeyManagementAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/SubValidator.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsUsingEcdsaP521Sha512ExampleTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/PublicJsonWebKey.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/AesKey.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/BigEndianBigInteger.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/GeneralJweTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwa/AlgorithmFactoryTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/AlgorithmAvailability.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/http/Get.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/EcKeyUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/OctetKeyPairJsonWebKey.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/X509UtilTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/AlgorithmInfo.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsUnencodedPayloadOptionTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/ZipTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/lang/JsonHelpTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/AlgorithmFactoryFactory.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/TypeValidatorTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/OctJwkGenerator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/OctetSequenceJsonWebKey.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/SelectorSupport.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/Headers.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/ByteUtil.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/ItemList.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/resolvers/HttpsJwksVerificationKeyResolverTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/resolvers/EmbeddedJwkVerificationKeyResolverTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/EcdhKeyAgreementAlgorithmTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/GetPayloadTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/JwtClaimsTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/Rfc7638JwkThumbprintUriTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/Pbes2HmacShaWithAesKeyWrapAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/JsonWebEncryption.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/JwsPayloadVariationsTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/EcdsaUsingShaAlgorithm.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/NegativeJweWrappingTest.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/zip/DeflateRFC1951CompressionAlgorithmTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/TypeValidator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/ContentEncryptionAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/ContentEncryptionKeyDescriptor.java [] []
/src/project-parent/jose4j/src/test/java/org/jose4j/jwx/HeadersTest.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/Algorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/zip/CompressionAlgorithm.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/VerificationKeyResolver.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/Validator.java [] []
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/JsonWebKey.java [] []

Directories in report

Directory
/src/project-parent/fuzz-targets/src/test/java/com/example/
/src/project-parent/jose4j/src/test/java/org/jose4j/jws/
/src/project-parent/jose4j/src/test/java/org/jose4j/base64url/internal/apache/commons/codec/binary/
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/
/src/project-parent/jose4j/src/main/java/org/jose4j/zip/
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/parser/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/consumer/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/kdf/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwa/
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwx/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwk/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwt/
/src/project-parent/jose4j/src/main/java/org/jose4j/json/internal/json_simple/
/src/project-parent/jose4j/src/main/java/org/jose4j/lang/
/src/project-parent/jose4j/src/test/java/org/jose4j/cookbook/
/src/project-parent/jose4j/src/test/java/org/jose4j/keys/resolvers/
/src/project-parent/jose4j/src/test/java/org/jose4j/lang/
/src/project-parent/jose4j/src/test/java/org/jose4j/examples/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/
/src/project-parent/jose4j/src/test/java/org/jose4j/json/
/src/project-parent/jose4j/src/main/java/org/jose4j/jws/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwx/
/src/project-parent/jose4j/src/test/java/org/jose4j/jca/
/src/project-parent/jose4j/src/test/java/org/jose4j/zip/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwk/
/src/project-parent/jose4j/src/main/java/org/jose4j/json/
/src/project-parent/jose4j/src/main/java/org/jose4j/keys/resolvers/
/src/project-parent/jose4j/src/test/java/org/jose4j/http/
/src/project-parent/jose4j/src/main/java/org/jose4j/http/
/src/project-parent/jose4j/src/main/java/org/jose4j/base64url/internal/apache/commons/codec/binary/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwt/consumer/
/src/project-parent/jose4j/src/main/java/org/jose4j/mac/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwa/
/src/project-parent/jose4j/src/main/java/org/jose4j/jwe/kdf/
/src/project-parent/jose4j/src/main/java/org/jose4j/jca/
/src/project-parent/jose4j/src/test/java/org/jose4j/jwe/