Fuzz introspector: JoseParserFuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
6 20 [org.keycloak.jose.jwe.JWE].getHeader() call site: {node_id}
4 10 [org.keycloak.common.util.Base64].decode4to3(byte[],int,byte[],int,int) call site: {node_id}
3 0 EP call site: {node_id}

Fuzzer calltree

0 [JoseParserFuzzer].fuzzerTestOneInput(com.code_intelligence.jazzer.api.FuzzedDataProvider) [function] [call site] 00000
1 [com.code_intelligence.jazzer.api.FuzzedDataProvider].consumeRemainingAsString() [function] [call site] 00001
1 [org.keycloak.jose.JOSEParser].parse(java.lang.String) [function] [call site] 00002
2 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00003
3 [org.keycloak.common.util.Base64Url].encodeBase64UrlToBase64(java.lang.String) [function] [call site] 00004
3 [org.keycloak.common.util.Base64].decode(java.lang.String) [function] [call site] 00005
4 [org.keycloak.common.util.Base64].decode(java.lang.String,int) [function] [call site] 00006
5 [org.keycloak.common.util.Base64].decode(byte[],int,int,int) [function] [call site] 00007
6 [org.keycloak.common.util.Base64].getDecodabet(int) [function] [call site] 00008
6 [org.keycloak.common.util.Base64].decode4to3(byte[],int,byte[],int,int) [function] [call site] 00009
7 [org.keycloak.common.util.Base64].getDecodabet(int) [function] [call site] 00010
2 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00011
2 [org.keycloak.jose.jwe.JWE]. (java.lang.String) [function] [call site] 00012
3 [org.keycloak.jose.jwe.JWEKeyStorage]. () [function] [call site] 00013
3 [org.keycloak.jose.jwe.JWE].setupJWEHeader(java.lang.String) [function] [call site] 00014
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00015
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00016
4 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00017
4 [org.keycloak.jose.jwe.JWE].getHeader() [function] [call site] 00018
5 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00019
5 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00020
2 [org.keycloak.jose.jws.JWSInput]. (java.lang.String) [function] [call site] 00021
3 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00022
3 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00023
3 [org.keycloak.common.util.Base64Url].decode(java.lang.String) [function] [call site] 00024
3 [org.keycloak.util.JsonSerialization].readValue(byte[],java.lang.Class) [function] [call site] 00025
3 [org.keycloak.jose.jws.JWSInputException]. (java.lang.Throwable) [function] [call site] 00026