Fuzz introspector: fuzz_aes
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['abort']

2 2 fuzz_aes call site: 00075 /src/krb5/src/tests/fuzzing/fuzz_aes.c:82
0 0 None 0 608 krb5int_aes_decrypt call site: 00061 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:327
0 0 None 0 608 krb5int_aes_decrypt call site: 00062 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:334
0 0 None 0 596 krb5int_aes_encrypt call site: 00030 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:263
0 0 None 0 596 krb5int_aes_encrypt call site: 00032 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:270
0 0 None 0 21 fuzz_aes call site: 00007 /src/krb5/src/tests/fuzzing/fuzz_aes.c:57
0 0 None 0 21 fuzz_aes call site: 00008 /src/krb5/src/tests/fuzzing/fuzz_aes.c:65
0 0 None 0 21 fuzz_aes call site: 00011 /src/krb5/src/tests/fuzzing/fuzz_aes.c:73
0 0 None 0 21 fuzz_aes call site: 00045 /src/krb5/src/tests/fuzzing/fuzz_aes.c:77
0 0 None 0 0 krb5int_aes_encrypt call site: 00012 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:247
0 0 None 0 0 krb5int_aes_decrypt call site: 00046 /src/krb5/src/lib/crypto/builtin/enc_provider/aes.c:310
0 0 None 0 0 k5_iov_cursor_get call site: 00023 /src/krb5/src/lib/crypto/krb/aead.c:192

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 fuzz_aes [function] [call site] 00001
2 make_data [function] [call site] 00002
2 k5memdup [function] [call site] 00003
3 k5alloc [function] [call site] 00004
4 k5calloc [function] [call site] 00005
5 calloc [call site] 00006
2 krb5_k_create_key [function] [call site] 00008
3 krb5int_c_copy_keyblock_contents [function] [call site] 00009
2 make_data [function] [call site] 00010
2 krb5int_aes_encrypt [function] [call site] 00011
3 init_key_cache [function] [call site] 00012
3 expand_enc_key [function] [call site] 00013
4 k5_aes_encrypt_key [function] [call site] 00014
5 k5_aes_encrypt_key128 [function] [call site] 00015
5 aes_encrypt_key192 [function] [call site] 00016
5 k5_aes_encrypt_key256 [function] [call site] 00017
4 abort [call site] 00018
3 k5_iov_cursor_init [function] [call site] 00019
4 next_iov_to_process [function] [call site] 00020
3 iov_total_length [function] [call site] 00021
3 k5_iov_cursor_get [function] [call site] 00022
4 next_iov_to_process [function] [call site] 00023
3 cbc_enc [function] [call site] 00024
4 k5_aes_encrypt [function] [call site] 00028
4 abort [call site] 00029
3 k5_iov_cursor_put [function] [call site] 00030
4 next_iov_to_process [function] [call site] 00031
3 iov_cursor_contig_blocks [function] [call site] 00032
3 iov_cursor_ptr [function] [call site] 00033
3 iov_cursor_advance [function] [call site] 00035
3 k5_iov_cursor_get [function] [call site] 00036
3 k5_iov_cursor_put [function] [call site] 00038
3 k5_iov_cursor_get [function] [call site] 00039
3 k5_iov_cursor_get [function] [call site] 00040
3 k5_iov_cursor_put [function] [call site] 00043
3 k5_iov_cursor_put [function] [call site] 00044
2 krb5int_aes_decrypt [function] [call site] 00045
3 init_key_cache [function] [call site] 00046
3 expand_dec_key [function] [call site] 00047
4 k5_aes_decrypt_key [function] [call site] 00048
5 k5_aes_decrypt_key128 [function] [call site] 00049
5 aes_decrypt_key192 [function] [call site] 00050
5 k5_aes_decrypt_key256 [function] [call site] 00051
4 abort [call site] 00052
3 k5_iov_cursor_init [function] [call site] 00053
3 iov_total_length [function] [call site] 00054
3 k5_iov_cursor_get [function] [call site] 00055
3 cbc_dec [function] [call site] 00056
4 __assert_fail [call site] 00057
4 k5_aes_decrypt [function] [call site] 00058
4 abort [call site] 00059
3 k5_iov_cursor_put [function] [call site] 00061
3 iov_cursor_contig_blocks [function] [call site] 00062
3 iov_cursor_ptr [function] [call site] 00063
3 iov_cursor_advance [function] [call site] 00065
3 k5_iov_cursor_get [function] [call site] 00066
3 k5_iov_cursor_put [function] [call site] 00068
3 k5_iov_cursor_get [function] [call site] 00069
3 k5_iov_cursor_get [function] [call site] 00070
3 k5_iov_cursor_put [function] [call site] 00073
3 k5_iov_cursor_put [function] [call site] 00074
2 memcmp [call site] 00075
2 abort [call site] 00076
2 krb5int_aes_decrypt [function] [call site] 00077
2 krb5_k_free_key [function] [call site] 00078
3 krb5_k_free_key [function] [call site] 00079
4 krb5int_c_free_keyblock_contents [function] [call site] 00080
5 zapfree [function] [call site] 00081
6 explicit_bzero [call site] 00082
4 find_enctype [function] [call site] 00083