Fuzz introspector: fuzz_test_sig
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
110 110 1 :

['pqov_uov_Is_avx2_gf16mat_gaussian_elim_ref']

110 110 pqov_uov_Is_avx2_gf16mat_gaussian_elim_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_avx2/blas_matrix_avx2.c:748
110 110 1 :

['pqov_uov_Is_pkc_avx2_gf16mat_gaussian_elim_ref']

110 110 pqov_uov_Is_pkc_avx2_gf16mat_gaussian_elim_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_pkc_avx2/blas_matrix_avx2.c:748
110 110 1 :

['pqov_uov_Is_pkc_skc_avx2_gf16mat_gaussian_elim_ref']

110 110 pqov_uov_Is_pkc_skc_avx2_gf16mat_gaussian_elim_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_pkc_skc_avx2/blas_matrix_avx2.c:748
43 43 1 :

['pqov_uov_Is_avx2_gf16mat_back_substitute_ref']

43 43 pqov_uov_Is_avx2_gf16mat_back_substitute_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_avx2/blas_matrix_avx2.c:756
43 43 1 :

['pqov_uov_Is_pkc_avx2_gf16mat_back_substitute_ref']

43 43 pqov_uov_Is_pkc_avx2_gf16mat_back_substitute_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_pkc_avx2/blas_matrix_avx2.c:756
43 43 1 :

['pqov_uov_Is_pkc_skc_avx2_gf16mat_back_substitute_ref']

43 43 pqov_uov_Is_pkc_skc_avx2_gf16mat_back_substitute_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_pkc_skc_avx2/blas_matrix_avx2.c:756
2 2 1 :

['exit']

2 2 oqs_aes128_ctr_enc_sch_ni call site: 00000 /src/liboqs/src/common/aes/aes128_ni.c:176
0 4 1 :

['gf16mat_prod_multab_96x_avx2']

0 4 pqov_uov_Is_avx2_gf16mat_prod_multab_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_avx2/blas_matrix_avx2.c:188
0 4 1 :

['gf16mat_prod_multab_64x_avx2']

0 4 pqov_uov_Is_avx2_gf16mat_prod_avx2 call site: 00000 /src/liboqs/src/sig/uov/pqov_ov_Is_avx2/blas_matrix_avx2.c:198
0 0 None 559 559 OQS_SIG_falcon_1024_keypair call site: 00000 /src/liboqs/src/sig/falcon/sig_falcon_1024.c:54
0 0 None 559 559 OQS_SIG_falcon_512_keypair call site: 00000 /src/liboqs/src/sig/falcon/sig_falcon_512.c:54
0 0 None 559 559 OQS_SIG_falcon_padded_1024_keypair call site: 00000 /src/liboqs/src/sig/falcon/sig_falcon_padded_1024.c:54

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 OQS_init [function] [call site] 00001
2 OQS_CPU_has_extension [function] [call site] 00002
3 pthread_once [call site] 00003
3 set_available_cpu_extensions [function] [call site] 00004
1 fuzz_sig [function] [call site] 00028
2 init_fuzz_context [function] [call site] 00029
3 srand [call site] 00030
3 OQS_randombytes_custom_algorithm [function] [call site] 00031
3 fuzz_rand [function] [call site] 00032
4 rand [call site] 00033
2 OQS_SIG_alg_identifier [function] [call site] 00034
2 OQS_SIG_new [function] [call site] 00035
3 strcasecmp [call site] 00036
3 OQS_SIG_dilithium_2_new [function] [call site] 00037
4 OQS_MEM_malloc [function] [call site] 00038
5 CRYPTO_malloc [call site] 00039
3 strcasecmp [call site] 00040
3 OQS_SIG_dilithium_3_new [function] [call site] 00041
3 strcasecmp [call site] 00042
3 OQS_SIG_dilithium_5_new [function] [call site] 00043
3 strcasecmp [call site] 00044
3 OQS_SIG_ml_dsa_44_new [function] [call site] 00045
3 strcasecmp [call site] 00046
3 OQS_SIG_ml_dsa_65_new [function] [call site] 00047
3 strcasecmp [call site] 00048
3 OQS_SIG_ml_dsa_87_new [function] [call site] 00049
3 strcasecmp [call site] 00050
3 OQS_SIG_falcon_512_new [function] [call site] 00051
3 strcasecmp [call site] 00052
3 OQS_SIG_falcon_1024_new [function] [call site] 00053
3 strcasecmp [call site] 00054
3 OQS_SIG_falcon_padded_512_new [function] [call site] 00055
3 strcasecmp [call site] 00056
3 OQS_SIG_falcon_padded_1024_new [function] [call site] 00057
3 strcasecmp [call site] 00058
3 OQS_SIG_sphincs_sha2_128f_simple_new [function] [call site] 00059
3 strcasecmp [call site] 00060
3 OQS_SIG_sphincs_sha2_128s_simple_new [function] [call site] 00061
3 strcasecmp [call site] 00062
3 OQS_SIG_sphincs_sha2_192f_simple_new [function] [call site] 00063
3 strcasecmp [call site] 00064
3 OQS_SIG_sphincs_sha2_192s_simple_new [function] [call site] 00065
3 strcasecmp [call site] 00066
3 OQS_SIG_sphincs_sha2_256f_simple_new [function] [call site] 00067
3 strcasecmp [call site] 00068
3 OQS_SIG_sphincs_sha2_256s_simple_new [function] [call site] 00069
3 strcasecmp [call site] 00070
3 OQS_SIG_sphincs_shake_128f_simple_new [function] [call site] 00071
3 strcasecmp [call site] 00072
3 OQS_SIG_sphincs_shake_128s_simple_new [function] [call site] 00073
3 strcasecmp [call site] 00074
3 OQS_SIG_sphincs_shake_192f_simple_new [function] [call site] 00075
3 strcasecmp [call site] 00076
3 OQS_SIG_sphincs_shake_192s_simple_new [function] [call site] 00077
3 strcasecmp [call site] 00078
3 OQS_SIG_sphincs_shake_256f_simple_new [function] [call site] 00079
3 strcasecmp [call site] 00080
3 OQS_SIG_sphincs_shake_256s_simple_new [function] [call site] 00081
3 strcasecmp [call site] 00082
3 OQS_SIG_mayo_1_new [function] [call site] 00083
3 strcasecmp [call site] 00084
3 OQS_SIG_mayo_2_new [function] [call site] 00085
3 strcasecmp [call site] 00086
3 OQS_SIG_mayo_3_new [function] [call site] 00087
3 strcasecmp [call site] 00088
3 OQS_SIG_mayo_5_new [function] [call site] 00089
3 strcasecmp [call site] 00090
3 OQS_SIG_cross_rsdp_128_balanced_new [function] [call site] 00091
3 strcasecmp [call site] 00092
3 OQS_SIG_cross_rsdp_128_fast_new [function] [call site] 00093
3 strcasecmp [call site] 00094
3 OQS_SIG_cross_rsdp_128_small_new [function] [call site] 00095
3 strcasecmp [call site] 00096
3 OQS_SIG_cross_rsdp_192_balanced_new [function] [call site] 00097
3 strcasecmp [call site] 00098
3 OQS_SIG_cross_rsdp_192_fast_new [function] [call site] 00099
3 strcasecmp [call site] 00100
3 OQS_SIG_cross_rsdp_192_small_new [function] [call site] 00101
3 strcasecmp [call site] 00102
3 OQS_SIG_cross_rsdp_256_balanced_new [function] [call site] 00103
3 strcasecmp [call site] 00104
3 OQS_SIG_cross_rsdp_256_fast_new [function] [call site] 00105
3 strcasecmp [call site] 00106
3 OQS_SIG_cross_rsdp_256_small_new [function] [call site] 00107
3 strcasecmp [call site] 00108
3 OQS_SIG_cross_rsdpg_128_balanced_new [function] [call site] 00109
3 strcasecmp [call site] 00110
3 OQS_SIG_cross_rsdpg_128_fast_new [function] [call site] 00111
3 strcasecmp [call site] 00112
3 OQS_SIG_cross_rsdpg_128_small_new [function] [call site] 00113
3 strcasecmp [call site] 00114
3 OQS_SIG_cross_rsdpg_192_balanced_new [function] [call site] 00115
3 strcasecmp [call site] 00116
3 OQS_SIG_cross_rsdpg_192_fast_new [function] [call site] 00117
3 strcasecmp [call site] 00118
3 OQS_SIG_cross_rsdpg_192_small_new [function] [call site] 00119
3 strcasecmp [call site] 00120
3 OQS_SIG_cross_rsdpg_256_balanced_new [function] [call site] 00121
3 strcasecmp [call site] 00122
3 OQS_SIG_cross_rsdpg_256_fast_new [function] [call site] 00123
3 strcasecmp [call site] 00124
3 OQS_SIG_cross_rsdpg_256_small_new [function] [call site] 00125
3 strcasecmp [call site] 00126
3 OQS_SIG_uov_ov_Is_new [function] [call site] 00127
3 strcasecmp [call site] 00128
3 OQS_SIG_uov_ov_Ip_new [function] [call site] 00129
3 strcasecmp [call site] 00130
3 OQS_SIG_uov_ov_III_new [function] [call site] 00131
3 strcasecmp [call site] 00132
3 OQS_SIG_uov_ov_V_new [function] [call site] 00133
3 strcasecmp [call site] 00134
3 OQS_SIG_uov_ov_Is_pkc_new [function] [call site] 00135
3 strcasecmp [call site] 00136
3 OQS_SIG_uov_ov_Ip_pkc_new [function] [call site] 00137
3 strcasecmp [call site] 00138
3 OQS_SIG_uov_ov_III_pkc_new [function] [call site] 00139
3 strcasecmp [call site] 00140
3 OQS_SIG_uov_ov_V_pkc_new [function] [call site] 00141
3 strcasecmp [call site] 00142
3 OQS_SIG_uov_ov_Is_pkc_skc_new [function] [call site] 00143
3 strcasecmp [call site] 00144
3 OQS_SIG_uov_ov_Ip_pkc_skc_new [function] [call site] 00145
3 strcasecmp [call site] 00146
3 OQS_SIG_uov_ov_III_pkc_skc_new [function] [call site] 00147
3 strcasecmp [call site] 00148
3 OQS_SIG_uov_ov_V_pkc_skc_new [function] [call site] 00149
3 strcasecmp [call site] 00150
3 OQS_SIG_snova_SNOVA_24_5_4_new [function] [call site] 00151
3 strcasecmp [call site] 00152
3 OQS_SIG_snova_SNOVA_24_5_4_SHAKE_new [function] [call site] 00153
3 strcasecmp [call site] 00154
3 OQS_SIG_snova_SNOVA_24_5_4_esk_new [function] [call site] 00155
3 strcasecmp [call site] 00156
3 OQS_SIG_snova_SNOVA_24_5_4_SHAKE_esk_new [function] [call site] 00157
3 strcasecmp [call site] 00158
3 OQS_SIG_snova_SNOVA_37_17_2_new [function] [call site] 00159
3 strcasecmp [call site] 00160
3 OQS_SIG_snova_SNOVA_25_8_3_new [function] [call site] 00161
3 strcasecmp [call site] 00162
3 OQS_SIG_snova_SNOVA_56_25_2_new [function] [call site] 00163
3 strcasecmp [call site] 00164
3 OQS_SIG_snova_SNOVA_49_11_3_new [function] [call site] 00165
3 strcasecmp [call site] 00166
3 OQS_SIG_snova_SNOVA_37_8_4_new [function] [call site] 00167
3 strcasecmp [call site] 00168
3 OQS_SIG_snova_SNOVA_24_5_5_new [function] [call site] 00169
3 strcasecmp [call site] 00170
3 OQS_SIG_snova_SNOVA_60_10_4_new [function] [call site] 00171
3 strcasecmp [call site] 00172
3 OQS_SIG_snova_SNOVA_29_6_5_new [function] [call site] 00173
2 printf [call site] 00174
2 fwrite [call site] 00175
2 cleanup_heap [function] [call site] 00176
3 OQS_MEM_secure_free [function] [call site] 00177
4 OQS_MEM_cleanse [function] [call site] 00178
5 OPENSSL_cleanse [call site] 00179
4 OQS_MEM_insecure_free [function] [call site] 00180
5 CRYPTO_free [call site] 00181
3 OQS_MEM_insecure_free [function] [call site] 00182
3 OQS_MEM_insecure_free [function] [call site] 00183
3 OQS_SIG_free [function] [call site] 00184
4 OQS_MEM_insecure_free [function] [call site] 00185
2 OQS_SIG_keypair [function] [call site] 00186
2 fwrite [call site] 00187
2 cleanup_heap [function] [call site] 00188
2 OQS_SIG_sign [function] [call site] 00189
2 fwrite [call site] 00190
2 cleanup_heap [function] [call site] 00191
2 OQS_SIG_verify [function] [call site] 00192
2 fwrite [call site] 00193
2 cleanup_heap [function] [call site] 00194
2 exit [call site] 00195
2 cleanup_heap [function] [call site] 00196
1 OQS_destroy [function] [call site] 00197
2 oqs_ossl_destroy [function] [call site] 00198