Fuzz introspector: secret_key_auth_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
45 45 2 :

['sodium_misuse', 'randombytes_sysrandom_random_dev_open']

47 47 randombytes_sysrandom_init call site: 00000 /src/libsodium/src/libsodium/randombytes/sysrandom/randombytes_sysrandom.c:271
18 18 1 :

['sodium_misuse']

18 18 crypto_stream_chacha20_ietf_ext call site: 00000 /src/libsodium/src/libsodium/crypto_stream/chacha20/stream_chacha20.c:91
18 18 1 :

['sodium_misuse']

18 18 crypto_stream_chacha20_ietf call site: 00000 /src/libsodium/src/libsodium/crypto_stream/chacha20/stream_chacha20.c:124
18 18 1 :

['sodium_misuse']

18 18 randombytes_buf_deterministic call site: 00000 /src/libsodium/src/libsodium/randombytes/randombytes.c:171
18 18 1 :

['sodium_misuse']

18 18 randombytes_sysrandom_buf call site: 00000 /src/libsodium/src/libsodium/randombytes/sysrandom/randombytes_sysrandom.c:351
18 18 1 :

['sodium_misuse']

18 18 _sodium_alloc_init call site: 00018 /src/libsodium/src/libsodium/sodium/utils.c:420
14 14 1 :

['safe_read']

32 32 randombytes_sysrandom_buf call site: 00000 /src/libsodium/src/libsodium/randombytes/sysrandom/randombytes_sysrandom.c:350
4 4 2 :

['sodium_runtime_has_ssse3', 'sodium_runtime_has_sse41']

4 4 blake2b_pick_best_implementation call site: 00100 /src/libsodium/src/libsodium/crypto_generichash/blake2b/ref/blake2b-ref.c:416
2 2 1 :

['sodium_runtime_has_ssse3']

2 2 argon2_pick_best_implementation call site: 00043 /src/libsodium/src/libsodium/crypto_pwhash/argon2/argon2-core.c:535
2 2 1 :

['sodium_runtime_has_ssse3']

2 2 _crypto_stream_chacha20_pick_best_implementation call site: 00124 /src/libsodium/src/libsodium/crypto_stream/chacha20/stream_chacha20.c:172
0 28 1 :

['crypto_hash_sha512_final']

0 117 crypto_auth_hmacsha512_init call site: 00142 /src/libsodium/src/libsodium/crypto_auth/hmacsha512/auth_hmacsha512.c:44
0 0 None 0 28 crypto_hash_sha512_update call site: 00144 /src/libsodium/src/libsodium/crypto_hash/sha512/cp/hash_sha512_cp.c:226

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 sodium_init [function] [call site] 00001
2 sodium_crit_enter [function] [call site] 00002
3 pthread_mutex_lock [call site] 00003
3 __assert_fail [call site] 00004
2 sodium_crit_leave [function] [call site] 00005
3 pthread_mutex_unlock [call site] 00006
2 _sodium_runtime_get_cpu_features [function] [call site] 00007
3 _sodium_runtime_arm_cpu_features [function] [call site] 00008
3 _sodium_runtime_intel_cpu_features [function] [call site] 00009
4 _cpuid [function] [call site] 00010
4 _cpuid [function] [call site] 00011
4 _cpuid [function] [call site] 00012
4 _cpuid [function] [call site] 00013
2 randombytes_stir [function] [call site] 00014
3 randombytes_init_if_needed [function] [call site] 00015
4 randombytes_stir [function] [call site] 00016
2 _sodium_alloc_init [function] [call site] 00017
3 sysconf [call site] 00018
3 sodium_misuse [function] [call site] 00019
4 sodium_crit_leave [function] [call site] 00020
4 sodium_crit_enter [function] [call site] 00021
4 abort [call site] 00022
3 randombytes_buf [function] [call site] 00023
4 randombytes_init_if_needed [function] [call site] 00024
2 _crypto_pwhash_argon2_pick_best_implementation [function] [call site] 00025
3 argon2_pick_best_implementation [function] [call site] 00026
4 sodium_runtime_has_avx512f [function] [call site] 00027
4 argon2_fill_segment_avx512f [function] [call site] 00028
5 generate_addresses [function] [call site] 00029
6 init_block_value [function] [call site] 00030
6 init_block_value [function] [call site] 00031
6 init_block_value [function] [call site] 00032
6 init_block_value [function] [call site] 00033
6 fill_block_with_xor [function] [call site] 00034
7 muladd [function] [call site] 00035
7 muladd [function] [call site] 00036
6 fill_block_with_xor [function] [call site] 00037
5 index_alpha [function] [call site] 00038
5 fill_block_with_xor [function] [call site] 00039
5 fill_block [function] [call site] 00040
6 muladd [function] [call site] 00041
6 muladd [function] [call site] 00042
4 sodium_runtime_has_avx2 [function] [call site] 00043
4 argon2_fill_segment_avx2 [function] [call site] 00044
5 generate_addresses [function] [call site] 00045
6 init_block_value [function] [call site] 00046
6 init_block_value [function] [call site] 00047
6 init_block_value [function] [call site] 00048
6 init_block_value [function] [call site] 00049
6 fill_block_with_xor [function] [call site] 00050
6 fill_block_with_xor [function] [call site] 00051
5 index_alpha [function] [call site] 00052
5 fill_block_with_xor [function] [call site] 00053
5 fill_block [function] [call site] 00054
4 sodium_runtime_has_ssse3 [function] [call site] 00055
4 argon2_fill_segment_ssse3 [function] [call site] 00056
5 generate_addresses [function] [call site] 00057
6 init_block_value [function] [call site] 00058
6 init_block_value [function] [call site] 00059
6 fill_block_with_xor [function] [call site] 00060
7 fBlaMka [function] [call site] 00061
7 fBlaMka [function] [call site] 00062
6 fill_block_with_xor [function] [call site] 00063
5 index_alpha [function] [call site] 00064
5 fill_block_with_xor [function] [call site] 00065
5 fill_block [function] [call site] 00066
6 fBlaMka [function] [call site] 00067
6 fBlaMka [function] [call site] 00068
4 argon2_fill_segment_ref [function] [call site] 00069
5 generate_addresses [function] [call site] 00070
6 init_block_value [function] [call site] 00071
6 init_block_value [function] [call site] 00072
6 init_block_value [function] [call site] 00073
6 fill_block_with_xor [function] [call site] 00074
7 copy_block [function] [call site] 00075
7 xor_block [function] [call site] 00076
7 copy_block [function] [call site] 00077
7 xor_block [function] [call site] 00078
7 fBlaMka [function] [call site] 00079
7 rotr64 [function] [call site] 00080
7 fBlaMka [function] [call site] 00081
7 rotr64 [function] [call site] 00082
7 copy_block [function] [call site] 00083
7 xor_block [function] [call site] 00084
6 fill_block_with_xor [function] [call site] 00085
5 index_alpha [function] [call site] 00086
5 fill_block_with_xor [function] [call site] 00087
5 fill_block [function] [call site] 00088
6 copy_block [function] [call site] 00089
6 xor_block [function] [call site] 00090
6 copy_block [function] [call site] 00091
6 fBlaMka [function] [call site] 00092
6 rotr64 [function] [call site] 00093
6 fBlaMka [function] [call site] 00094
6 rotr64 [function] [call site] 00095
6 copy_block [function] [call site] 00096
6 xor_block [function] [call site] 00097
2 _crypto_generichash_blake2b_pick_best_implementation [function] [call site] 00098
3 blake2b_pick_best_implementation [function] [call site] 00099
4 sodium_runtime_has_avx2 [function] [call site] 00100
4 blake2b_compress_avx2 [function] [call site] 00101
4 sodium_runtime_has_sse41 [function] [call site] 00102
4 blake2b_compress_sse41 [function] [call site] 00103
4 sodium_runtime_has_ssse3 [function] [call site] 00104
4 blake2b_compress_ssse3 [function] [call site] 00105
4 blake2b_compress_ref [function] [call site] 00106
5 load64_le [function] [call site] 00107
5 rotr64 [function] [call site] 00108
5 rotr64 [function] [call site] 00109
5 rotr64 [function] [call site] 00110
5 rotr64 [function] [call site] 00111
5 rotr64 [function] [call site] 00112
5 rotr64 [function] [call site] 00113
5 rotr64 [function] [call site] 00114
5 rotr64 [function] [call site] 00115
5 rotr64 [function] [call site] 00116
5 rotr64 [function] [call site] 00117
5 rotr64 [function] [call site] 00118
2 _crypto_onetimeauth_poly1305_pick_best_implementation [function] [call site] 00119
3 sodium_runtime_has_sse2 [function] [call site] 00120
2 _crypto_scalarmult_curve25519_pick_best_implementation [function] [call site] 00121
3 sodium_runtime_has_avx [function] [call site] 00122
2 _crypto_stream_chacha20_pick_best_implementation [function] [call site] 00123
3 sodium_runtime_has_avx2 [function] [call site] 00124
3 sodium_runtime_has_ssse3 [function] [call site] 00125
2 _crypto_stream_salsa20_pick_best_implementation [function] [call site] 00126
3 sodium_runtime_has_avx2 [function] [call site] 00127
2 sodium_crit_leave [function] [call site] 00128
1 __assert_fail [call site] 00129
1 setup_fake_random(unsigned char const*, unsigned long) [function] [call site] 00130
2 randombytes_set_implementation [function] [call site] 00131
2 __assert_fail [call site] 00132
2 randombytes_implementation_name [function] [call site] 00133
3 randombytes_init_if_needed [function] [call site] 00134
2 strcmp [call site] 00135
2 sodium_init [function] [call site] 00136
2 __assert_fail [call site] 00137
1 crypto_auth_keygen [function] [call site] 00138
1 crypto_auth [function] [call site] 00139
2 crypto_auth_hmacsha512256 [function] [call site] 00140
3 crypto_auth_hmacsha512256_init [function] [call site] 00141
4 crypto_auth_hmacsha512_init [function] [call site] 00142
5 crypto_hash_sha512_init [function] [call site] 00143
5 crypto_hash_sha512_update [function] [call site] 00144
6 SHA512_Transform [function] [call site] 00145
7 be64dec_vect [function] [call site] 00146
8 load64_be [function] [call site] 00147
7 rotr64 [function] [call site] 00148
7 rotr64 [function] [call site] 00149
7 rotr64 [function] [call site] 00150
7 rotr64 [function] [call site] 00151
7 rotr64 [function] [call site] 00152
7 rotr64 [function] [call site] 00153
7 rotr64 [function] [call site] 00154
7 rotr64 [function] [call site] 00155
7 rotr64 [function] [call site] 00156
7 rotr64 [function] [call site] 00157
7 rotr64 [function] [call site] 00158
7 rotr64 [function] [call site] 00159
7 rotr64 [function] [call site] 00160
7 rotr64 [function] [call site] 00161
7 rotr64 [function] [call site] 00162
7 rotr64 [function] [call site] 00163
7 rotr64 [function] [call site] 00164
7 rotr64 [function] [call site] 00165
7 rotr64 [function] [call site] 00166
7 rotr64 [function] [call site] 00167
7 rotr64 [function] [call site] 00168
7 rotr64 [function] [call site] 00169
7 rotr64 [function] [call site] 00170
7 rotr64 [function] [call site] 00171
7 rotr64 [function] [call site] 00172
7 rotr64 [function] [call site] 00173
7 rotr64 [function] [call site] 00174
7 rotr64 [function] [call site] 00175
7 rotr64 [function] [call site] 00176
7 rotr64 [function] [call site] 00177
7 rotr64 [function] [call site] 00178
7 rotr64 [function] [call site] 00179
6 SHA512_Transform [function] [call site] 00180
6 sodium_memzero [function] [call site] 00181
7 explicit_bzero [call site] 00182
5 crypto_hash_sha512_final [function] [call site] 00183
6 SHA512_Pad [function] [call site] 00184
7 SHA512_Transform [function] [call site] 00185
7 be64enc_vect [function] [call site] 00186
8 store64_be [function] [call site] 00187
7 SHA512_Transform [function] [call site] 00188
6 be64enc_vect [function] [call site] 00189
6 sodium_memzero [function] [call site] 00190
6 sodium_memzero [function] [call site] 00191
5 crypto_hash_sha512_init [function] [call site] 00192
5 crypto_hash_sha512_update [function] [call site] 00193
5 crypto_hash_sha512_init [function] [call site] 00194
5 crypto_hash_sha512_update [function] [call site] 00195
5 sodium_memzero [function] [call site] 00196
5 sodium_memzero [function] [call site] 00197
3 crypto_auth_hmacsha512256_update [function] [call site] 00198
4 crypto_auth_hmacsha512_update [function] [call site] 00199
5 crypto_hash_sha512_update [function] [call site] 00200
3 crypto_auth_hmacsha512256_final [function] [call site] 00201
4 crypto_auth_hmacsha512_final [function] [call site] 00202
5 crypto_hash_sha512_final [function] [call site] 00203
5 crypto_hash_sha512_update [function] [call site] 00204
5 crypto_hash_sha512_final [function] [call site] 00205
5 sodium_memzero [function] [call site] 00206
1 crypto_auth_verify [function] [call site] 00207
2 crypto_auth_hmacsha512256_verify [function] [call site] 00208
3 crypto_auth_hmacsha512256 [function] [call site] 00209
3 crypto_verify_32 [function] [call site] 00210
3 sodium_memcmp [function] [call site] 00211
4 _sodium_dummy_symbol_to_prevent_memcmp_lto [function] [call site] 00212
1 __assert_fail [call site] 00213