Fuzz introspector: libtasn1_gnutls_der_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
772 1770 16 :

['_asn1_find_up', 'asn1_get_tag_der', '_asn1_append_sequence_set', '_asn1_delete_not_used', 'asn1_get_length_der', 'asn1_get_object_id_der', '_asn1_decode_simple_ber', 'strlen', 'type_field', '_asn1_set_value_lv', 'extract_tag_der_recursive', '_asn1_set_value', '_asn1_get_time_der', 'free', '_asn1_get_indefinite_length_string', 'delete_unneeded_choice_fields']

799 1953 asn1_der_decoding2 call site: 00202 /src/libtasn1/lib/decoding.c:1101
113 151 3 :

['strtoul', 'asn1_get_length_ber', 'asn1_get_length_der']

113 318 _asn1_extract_tag_der call site: 00174 /src/libtasn1/lib/decoding.c:568
27 27 1 :

['_asn1_error_description_tag_error']

27 66 asn1_der_decoding2 call site: 00203 /src/libtasn1/lib/decoding.c:1108
12 12 1 :

['_asn1_delete_list_and_nodes']

12 12 asn1_array2tree call site: 00120 /src/libtasn1/lib/structure.c:272
4 23 3 :

['strtoul', '_asn1_set_name', '_asn1_ltostr']

4 43 _asn1_insert_tag_der call site: 00352 /src/libtasn1/lib/coding.c:678
3 3 1 :

['safe_memset']

3 3 _asn1_remove_node call site: 00016 /src/libtasn1/lib/parser_aux.c:503
2 22 4 :

['_asn1_set_name', 'type_field.273', 'asn1_length_der', 'strtol']

2 22 _asn1_complete_explicit_tag call site: 00415 /src/libtasn1/lib/coding.c:549
2 2 2 :

['type_field.61', 'strcmp']

4 20 asn1_write_value call site: 00323 /src/libtasn1/lib/element.c:525
0 28 2 :

['_asn1_str_cat', '_asn1_str_cpy']

12 43 asn1_array2tree call site: 00077 /src/libtasn1/lib/structure.c:260
0 2 1 :

['_asn1_hash_name']

0 2 _asn1_cpy_name call site: 00130 /src/libtasn1/lib/parser_aux.c:433
0 0 None 799 1953 asn1_der_decoding2 call site: 00170 /src/libtasn1/lib/decoding.c:936
0 0 None 799 1953 asn1_der_decoding2 call site: 00170 /src/libtasn1/lib/decoding.c:959

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 asn1_array2tree [function] [call site] 00001
2 convert_old_type [function] [call site] 00002
2 _asn1_add_static_node [function] [call site] 00003
3 calloc [call site] 00004
2 _asn1_set_name [function] [call site] 00005
3 _asn1_str_cpy [function] [call site] 00006
4 strlen [call site] 00007
4 strcpy [call site] 00008
3 _asn1_hash_name [function] [call site] 00009
2 strlen [call site] 00010
2 _asn1_set_value [function] [call site] 00011
2 _asn1_delete_structure [function] [call site] 00012
3 _asn1_find_up [function] [call site] 00013
3 _asn1_set_down [function] [call site] 00014
3 _asn1_delete_node_from_list [function] [call site] 00015
3 _asn1_remove_node [function] [call site] 00016
4 safe_memset [function] [call site] 00017
3 _asn1_find_left [function] [call site] 00018
3 _asn1_find_up [function] [call site] 00019
3 _asn1_set_down [function] [call site] 00020
3 _asn1_set_right [function] [call site] 00021
3 _asn1_delete_node_from_list [function] [call site] 00022
3 _asn1_remove_node [function] [call site] 00023
2 _asn1_set_down [function] [call site] 00024
2 _asn1_delete_structure [function] [call site] 00025
2 _asn1_set_right [function] [call site] 00026
2 _asn1_find_up [function] [call site] 00027
2 _asn1_check_identifier [function] [call site] 00028
3 type_field [function] [call site] 00029
3 _asn1_str_cpy [function] [call site] 00030
3 _asn1_str_cat [function] [call site] 00031
4 strlen [call site] 00032
4 strlen [call site] 00033
4 strcat [call site] 00034
4 strncat [call site] 00035
3 _asn1_str_cat [function] [call site] 00036
3 asn1_find_node [function] [call site] 00037
4 strchr [call site] 00038
4 strchr [call site] 00039
4 _asn1_hash_name [function] [call site] 00040
4 _asn1_str_cpy [function] [call site] 00041
4 _asn1_hash_name [function] [call site] 00042
4 strcmp [call site] 00043
4 strchr [call site] 00044
4 _asn1_str_cpy [function] [call site] 00045
4 _asn1_hash_name [function] [call site] 00046
4 strcmp [call site] 00047
3 _asn1_str_cpy [function] [call site] 00048
3 strcpy [call site] 00049
3 type_field [function] [call site] 00050
3 type_field [function] [call site] 00051
3 _asn1_str_cpy [function] [call site] 00052
3 _asn1_str_cat [function] [call site] 00053
3 _asn1_str_cat [function] [call site] 00054
3 _asn1_str_cpy [function] [call site] 00055
3 strcpy [call site] 00056
3 asn1_find_node [function] [call site] 00057
3 type_field [function] [call site] 00058
3 type_field [function] [call site] 00059
3 type_field [function] [call site] 00060
3 c_isdigit [function] [call site] 00061
3 _asn1_str_cpy [function] [call site] 00062
3 _asn1_str_cat [function] [call site] 00063
3 _asn1_str_cat [function] [call site] 00064
3 _asn1_str_cpy [function] [call site] 00065
3 asn1_find_node [function] [call site] 00066
3 type_field [function] [call site] 00067
3 _asn1_find_up [function] [call site] 00068
2 _asn1_change_integer_value [function] [call site] 00069
3 type_field [function] [call site] 00070
3 _asn1_convert_integer [function] [call site] 00071
4 strtol [call site] 00072
3 asn1_octet_der [function] [call site] 00073
4 asn1_length_der [function] [call site] 00074
3 _asn1_set_value [function] [call site] 00075
3 _asn1_find_up [function] [call site] 00076
2 _asn1_expand_object_id [function] [call site] 00077
3 _asn1_str_cpy [function] [call site] 00078
3 type_field [function] [call site] 00079
3 type_field [function] [call site] 00080
3 c_isdigit [function] [call site] 00081
3 _asn1_str_cpy [function] [call site] 00082
3 _asn1_str_cat [function] [call site] 00083
3 _asn1_str_cat [function] [call site] 00084
3 asn1_find_node [function] [call site] 00085
3 _asn1_is_up [function] [call site] 00086
4 _asn1_find_up [function] [call site] 00087
3 type_field [function] [call site] 00088
3 _asn1_set_down [function] [call site] 00089
3 _asn1_delete_structure [function] [call site] 00090
3 _asn1_delete_node_from_list [function] [call site] 00091
3 _asn1_remove_node [function] [call site] 00092
3 type_field [function] [call site] 00093
3 _asn1_add_single_node [function] [call site] 00094
4 calloc [call site] 00095
3 _asn1_set_name [function] [call site] 00096
3 strlen [call site] 00097
3 _asn1_set_value [function] [call site] 00098
3 _asn1_add_static_node2 [function] [call site] 00099
3 _asn1_set_right [function] [call site] 00100
3 _asn1_set_down [function] [call site] 00101
3 _asn1_set_right [function] [call site] 00102
3 _asn1_set_right [function] [call site] 00103
3 _asn1_find_up [function] [call site] 00104
3 type_field [function] [call site] 00105
3 type_field [function] [call site] 00106
3 _asn1_str_cpy [function] [call site] 00107
3 _asn1_str_cat [function] [call site] 00108
3 _asn1_str_cat [function] [call site] 00109
3 asn1_find_node [function] [call site] 00110
3 type_field [function] [call site] 00111
3 type_field [function] [call site] 00112
3 _asn1_str_cat [function] [call site] 00113
3 _asn1_str_cat [function] [call site] 00114
3 strlen [call site] 00115
3 _asn1_set_value [function] [call site] 00116
3 _asn1_find_up [function] [call site] 00117
2 _asn1_str_cpy [function] [call site] 00118
2 _asn1_str_cat [function] [call site] 00119
2 _asn1_str_cat [function] [call site] 00120
2 _asn1_delete_list_and_nodes [function] [call site] 00121
3 _asn1_remove_node [function] [call site] 00122
2 _asn1_delete_list [function] [call site] 00123
1 __assert_fail [call site] 00124
1 asn1_create_element [function] [call site] 00125
2 _asn1_copy_structure2 [function] [call site] 00126
3 asn1_find_node [function] [call site] 00127
3 _asn1_copy_structure3 [function] [call site] 00128
4 _asn1_add_single_node [function] [call site] 00129
4 _asn1_cpy_name [function] [call site] 00130
5 _asn1_hash_name [function] [call site] 00131
5 _asn1_str_cpy [function] [call site] 00132
4 _asn1_set_value [function] [call site] 00133
4 _asn1_add_single_node [function] [call site] 00134
4 _asn1_set_down [function] [call site] 00135
4 _asn1_add_single_node [function] [call site] 00136
4 _asn1_set_right [function] [call site] 00137
4 _asn1_find_up [function] [call site] 00138
4 _asn1_find_up [function] [call site] 00139
2 _asn1_set_name [function] [call site] 00140
2 _asn1_expand_identifier [function] [call site] 00141
3 type_field [function] [call site] 00142
3 snprintf [call site] 00143
3 _asn1_copy_structure2 [function] [call site] 00144
3 _asn1_cpy_name [function] [call site] 00145
3 _asn1_set_right [function] [call site] 00146
3 _asn1_set_down [function] [call site] 00147
3 _asn1_find_left [function] [call site] 00148
3 _asn1_set_right [function] [call site] 00149
3 _asn1_find_up [function] [call site] 00150
3 _asn1_set_down [function] [call site] 00151
3 _asn1_remove_node [function] [call site] 00152
3 _asn1_find_up [function] [call site] 00153
2 _asn1_type_choice_config [function] [call site] 00154
3 type_field [function] [call site] 00155
3 type_field [function] [call site] 00156
3 _asn1_find_left [function] [call site] 00157
3 type_field [function] [call site] 00158
3 _asn1_add_single_node [function] [call site] 00159
3 strlen [call site] 00160
3 _asn1_set_value [function] [call site] 00161
3 _asn1_set_right [function] [call site] 00162
3 _asn1_set_down [function] [call site] 00163
3 _asn1_find_left [function] [call site] 00164
3 type_field [function] [call site] 00165
3 asn1_delete_structure [function] [call site] 00166
4 _asn1_delete_structure [function] [call site] 00167
3 _asn1_find_up [function] [call site] 00168
1 asn1_der_decoding [function] [call site] 00169
2 asn1_der_decoding2 [function] [call site] 00170
3 _asn1_find_up [function] [call site] 00171
3 extract_tag_der_recursive [function] [call site] 00172
4 type_field [function] [call site] 00173
4 _asn1_extract_tag_der [function] [call site] 00174
5 type_field [function] [call site] 00175
5 asn1_get_tag_der [function] [call site] 00176
5 asn1_get_length_der [function] [call site] 00177
5 asn1_get_length_ber [function] [call site] 00178
6 asn1_get_length_der [function] [call site] 00179
6 _asn1_get_indefinite_length_string [function] [call site] 00180
7 asn1_get_tag_der [function] [call site] 00181
7 asn1_get_length_der [function] [call site] 00182
5 strtoul [call site] 00183
5 type_field [function] [call site] 00184
5 type_field [function] [call site] 00185
5 type_field [function] [call site] 00186
5 type_field [function] [call site] 00187
5 strtoul [call site] 00188
5 asn1_get_tag_der [function] [call site] 00189
5 type_field [function] [call site] 00190
5 type_field [function] [call site] 00191
5 asn1_get_tag_der [function] [call site] 00192
4 _asn1_extract_tag_der [function] [call site] 00193
3 _asn1_find_up [function] [call site] 00194
3 asn1_delete_structure [function] [call site] 00195
3 type_field [function] [call site] 00196
3 extract_tag_der_recursive [function] [call site] 00197
3 delete_unneeded_choice_fields [function] [call site] 00198
4 asn1_delete_structure [function] [call site] 00199
3 asn1_delete_structure [function] [call site] 00200
3 type_field [function] [call site] 00201
3 extract_tag_der_recursive [function] [call site] 00202
3 _asn1_set_value [function] [call site] 00203
3 _asn1_error_description_tag_error [function] [call site] 00204
4 _asn1_str_cpy [function] [call site] 00205
4 strlen [call site] 00206
4 _asn1_hierarchical_name [function] [call site] 00207
5 _asn1_str_cpy [function] [call site] 00208
5 _asn1_str_cpy [function] [call site] 00209
5 _asn1_str_cat [function] [call site] 00210
5 _asn1_str_cat [function] [call site] 00211
5 _asn1_find_up [function] [call site] 00212
5 _asn1_str_cpy [function] [call site] 00213
4 _asn1_str_cat [function] [call site] 00214
3 type_field [function] [call site] 00215
3 _asn1_set_value [function] [call site] 00216
3 _asn1_set_value [function] [call site] 00217
3 asn1_get_length_der [function] [call site] 00218
3 _asn1_set_value [function] [call site] 00219
3 asn1_get_object_id_der [function] [call site] 00220
4 asn1_get_length_der [function] [call site] 00221
4 _asn1_ltostr [function] [call site] 00222
4 _asn1_str_cpy [function] [call site] 00223
4 _asn1_str_cat [function] [call site] 00224
4 _asn1_ltostr [function] [call site] 00225
4 _asn1_str_cat [function] [call site] 00226
4 _asn1_str_cat [function] [call site] 00227
4 _asn1_ltostr [function] [call site] 00228
4 _asn1_str_cat [function] [call site] 00229
3 strlen [call site] 00230
3 _asn1_set_value [function] [call site] 00231
3 type_field [function] [call site] 00232
3 _asn1_get_time_der [function] [call site] 00233
4 asn1_get_length_der [function] [call site] 00234
4 c_isdigit [function] [call site] 00235
3 strlen [call site] 00236
3 _asn1_set_value [function] [call site] 00237
3 asn1_get_length_der [function] [call site] 00238
3 _asn1_set_value [function] [call site] 00239
3 type_field [function] [call site] 00240
3 _asn1_decode_simple_ber [function] [call site] 00241
4 asn1_get_tag_der [function] [call site] 00242
4 _asn1_decode_simple_ber [function] [call site] 00243
5 append [function] [call site] 00244
6 _asn1_realloc [function] [call site] 00245
7 realloc [call site] 00246
5 asn1_get_length_ber [function] [call site] 00247
5 _asn1_decode_simple_ber [function] [call site] 00248
6 append [function] [call site] 00249
6 asn1_get_length_der [function] [call site] 00250
6 _asn1_decode_simple_der [function] [call site] 00251
7 asn1_get_tag_der [function] [call site] 00252
7 asn1_get_length_der [function] [call site] 00253
6 append [function] [call site] 00254
3 _asn1_set_value_lv [function] [call site] 00255
4 asn1_length_der [function] [call site] 00256
4 asn1_octet_der [function] [call site] 00257
4 _asn1_set_value_m [function] [call site] 00258
3 asn1_get_length_der [function] [call site] 00259
3 _asn1_set_value [function] [call site] 00260
3 asn1_get_length_der [function] [call site] 00261
3 type_field [function] [call site] 00262
3 asn1_delete_structure [function] [call site] 00263
3 _asn1_append_sequence_set [function] [call site] 00264
4 type_field [function] [call site] 00265
4 type_field [function] [call site] 00266
4 _asn1_copy_structure3 [function] [call site] 00267
4 _asn1_set_right [function] [call site] 00268
4 _asn1_str_cpy [function] [call site] 00269
4 strtol [call site] 00270
4 _asn1_ltostr [function] [call site] 00271
4 _asn1_set_name [function] [call site] 00272
3 _asn1_append_sequence_set [function] [call site] 00273
3 asn1_get_length_der [function] [call site] 00274
3 type_field [function] [call site] 00275
3 type_field [function] [call site] 00276
3 _asn1_append_sequence_set [function] [call site] 00277
3 asn1_get_tag_der [function] [call site] 00278
3 asn1_get_length_der [function] [call site] 00279
3 _asn1_set_value_lv [function] [call site] 00280
3 _asn1_get_indefinite_length_string [function] [call site] 00281
3 _asn1_set_value_lv [function] [call site] 00282
3 _asn1_find_up [function] [call site] 00283
3 _asn1_delete_not_used [function] [call site] 00284
4 _asn1_find_left [function] [call site] 00285
4 _asn1_find_up [function] [call site] 00286
4 asn1_delete_structure [function] [call site] 00287
3 asn1_delete_structure [function] [call site] 00288
1 asn1_delete_structure [function] [call site] 00289
1 asn1_create_element [function] [call site] 00290
1 asn1_write_value [function] [call site] 00291
2 asn1_find_node [function] [call site] 00292
2 asn1_delete_structure [function] [call site] 00293
2 type_field [function] [call site] 00294
2 type_field [function] [call site] 00295
2 type_field [function] [call site] 00296
2 asn1_delete_structure [function] [call site] 00297
2 strcmp [call site] 00298
2 type_field [function] [call site] 00299
2 _asn1_set_value [function] [call site] 00300
2 _asn1_set_value [function] [call site] 00301
2 _asn1_set_value [function] [call site] 00302
2 strcmp [call site] 00303
2 type_field [function] [call site] 00304
2 _asn1_set_value [function] [call site] 00305
2 _asn1_set_value [function] [call site] 00306
2 _asn1_set_value [function] [call site] 00307
2 c_isdigit [function] [call site] 00308
2 _asn1_convert_integer [function] [call site] 00309
2 type_field [function] [call site] 00310
2 strcmp [call site] 00311
2 _asn1_convert_integer [function] [call site] 00312
2 type_field [function] [call site] 00313
2 _asn1_set_value_lv [function] [call site] 00314
2 type_field [function] [call site] 00315
2 c_isdigit [function] [call site] 00316
2 _asn1_convert_integer [function] [call site] 00317
2 type_field [function] [call site] 00318
2 strcmp [call site] 00319
2 _asn1_convert_integer [function] [call site] 00320
2 _asn1_set_value [function] [call site] 00321
2 strlen [call site] 00322
2 c_isdigit [function] [call site] 00323
2 type_field [function] [call site] 00324
2 strcmp [call site] 00325
2 _asn1_set_value [function] [call site] 00326
2 strlen [call site] 00327
2 _asn1_set_value [function] [call site] 00328
2 strlen [call site] 00329
2 c_isdigit [function] [call site] 00330
2 c_isdigit [function] [call site] 00331
2 c_isdigit [function] [call site] 00332
2 c_isdigit [function] [call site] 00333
2 c_isdigit [function] [call site] 00334
2 _asn1_set_value [function] [call site] 00335
2 strlen [call site] 00336
2 _asn1_set_value [function] [call site] 00337
2 strlen [call site] 00338
2 _asn1_set_value_lv [function] [call site] 00339
2 asn1_length_der [function] [call site] 00340
2 asn1_bit_der [function] [call site] 00341
3 asn1_length_der [function] [call site] 00342
2 strcmp [call site] 00343
2 asn1_delete_structure [function] [call site] 00344
2 _asn1_set_value_lv [function] [call site] 00345
2 strcmp [call site] 00346
2 _asn1_append_sequence_set [function] [call site] 00347
1 asn1_der_decoding [function] [call site] 00348
1 asn1_der_coding [function] [call site] 00349
2 asn1_find_node [function] [call site] 00350
2 _asn1_copy_structure3 [function] [call site] 00351
2 _asn1_insert_tag_der [function] [call site] 00352
3 type_field [function] [call site] 00353
3 _asn1_tag_der [function] [call site] 00354
3 strtoul [call site] 00355
3 _asn1_tag_der [function] [call site] 00356
3 _asn1_ltostr [function] [call site] 00357
3 _asn1_set_name [function] [call site] 00358
3 type_field [function] [call site] 00359
3 type_field [function] [call site] 00360
3 type_field [function] [call site] 00361
3 type_field [function] [call site] 00362
3 strtoul [call site] 00363
3 _asn1_tag_der [function] [call site] 00364
3 type_field [function] [call site] 00365
3 _asn1_tag_der [function] [call site] 00366
2 type_field [function] [call site] 00367
2 _asn1_error_description_value_not_found [function] [call site] 00368
3 _asn1_str_cpy [function] [call site] 00369
3 strlen [call site] 00370
3 _asn1_hierarchical_name [function] [call site] 00371
3 _asn1_str_cat [function] [call site] 00372
2 _asn1_error_description_value_not_found [function] [call site] 00373
2 asn1_get_length_der [function] [call site] 00374
2 _asn1_error_description_value_not_found [function] [call site] 00375
2 _asn1_object_id_der [function] [call site] 00376
3 strlen [call site] 00377
3 strchr [call site] 00378
3 strtoul [call site] 00379
3 encode_val [function] [call site] 00380
3 encode_val [function] [call site] 00381
3 asn1_length_der [function] [call site] 00382
3 asn1_length_der [function] [call site] 00383
2 _asn1_error_description_value_not_found [function] [call site] 00384
2 _asn1_time_der [function] [call site] 00385
3 asn1_length_der [function] [call site] 00386
2 _asn1_error_description_value_not_found [function] [call site] 00387
2 asn1_get_length_der [function] [call site] 00388
2 type_field [function] [call site] 00389
2 type_field [function] [call site] 00390
2 _asn1_ordering_set [function] [call site] 00391
3 type_field [function] [call site] 00392
3 type_field [function] [call site] 00393
3 type_field [function] [call site] 00394
3 asn1_get_tag_der [function] [call site] 00395
3 asn1_get_length_der [function] [call site] 00396
2 asn1_length_der [function] [call site] 00397
2 type_field [function] [call site] 00398
2 type_field [function] [call site] 00399
2 _asn1_find_up [function] [call site] 00400
2 type_field [function] [call site] 00401
2 _asn1_ordering_set_of [function] [call site] 00402
3 type_field [function] [call site] 00403
3 type_field [function] [call site] 00404
3 type_field [function] [call site] 00405
3 realloc [call site] 00406
3 asn1_get_tag_der [function] [call site] 00407
3 asn1_get_length_der [function] [call site] 00408
3 qsort [call site] 00409
3 setof_compar [function] [call site] 00410
4 memcmp [call site] 00411
2 asn1_length_der [function] [call site] 00412
2 _asn1_error_description_value_not_found [function] [call site] 00413
2 asn1_get_length_der [function] [call site] 00414
2 _asn1_complete_explicit_tag [function] [call site] 00415
3 type_field [function] [call site] 00416
3 strtol [call site] 00417
3 _asn1_set_name [function] [call site] 00418
3 asn1_length_der [function] [call site] 00419
2 _asn1_find_up [function] [call site] 00420
2 asn1_delete_structure [function] [call site] 00421
1 __assert_fail [call site] 00422
1 asn1_der_coding [function] [call site] 00423
1 asn1_delete_structure [function] [call site] 00424