The following nodes represent call sites where fuzz blockers occur.
| Amount of callsites blocked | Calltree index | Parent function | Callsite | Largest blocked function |
|---|---|---|---|---|
| 352 | 0 | EP | call site: 00000 | model_signing.verifying.Config.verify |
...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key.TestOneInput
[function]
[call site]
00000
atheris.FuzzedDataProvider
[function]
[call site]
00001
tempfile.TemporaryDirectory
[function]
[call site]
00002
tempfile.TemporaryDirectory
[function]
[call site]
00003
pathlib.Path
[function]
[call site]
00004
utils.create_fuzz_files
[function]
[call site]
00005
utils.any_files
[function]
[call site]
00006
<builtin>.str
[function]
[call site]
00007
os.path.join
[function]
[call site]
00008
...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key._pick_key_spec
[function]
[call site]
00009
<builtin>.len
[function]
[call site]
00010
fdp.ConsumeIntInRange
[function]
[call site]
00011
utils._build_hashing_config_from_fdp
[function]
[call site]
00012
scfg.set_hashing_config
[function]
[call site]
00013
scfg.use_elliptic_key_signer
[function]
[call site]
00014
signer.sign
[function]
[call site]
00015
model_signing.verifying.Config.__init__
[function]
[call site]
00016
model_signing.verifying.Config.set_hashing_config
[function]
[call site]
00017
model_signing.verifying.Config.use_elliptic_key_verifier
[function]
[call site]
00018
pathlib.Path
[function]
[call site]
00019
model_signing._signing.sign_ec_key.Verifier.__init__
[function]
[call site]
00020
public_key_path.read_bytes
[function]
[call site]
00021
model_signing._signing.sign_ec_key._check_supported_ec_key
[function]
[call site]
00022
model_signing.verifying.Config.verify
[function]
[call site]
00023
pathlib.Path
[function]
[call site]
00024
model_signing._signing.sign_sigstore.Signature.read
[function]
[call site]
00025
path.read_text
[function]
[call site]
00026
sigstore.models.Bundle.from_json
[function]
[call site]
00027
sigstore_models.bundle.v1.Bundle.from_json
[function]
[call site]
00028
sigstore.models.Bundle.__init__
[function]
[call site]
00029
sigstore.models.Bundle._verify
[function]
[call site]
00030
enum.Enum.__init__
[function]
[call site]
00031
cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate
[function]
[call site]
00032
cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate
[function]
[call site]
00033
sigstore._utils.cert_is_leaf
[function]
[call site]
00034
sigstore._utils.cert_is_ca
[function]
[call site]
00035
cert.extensions.get_extension_for_oid
[function]
[call site]
00036
cert.extensions.get_extension_for_oid
[function]
[call site]
00037
cert.extensions.get_extension_for_oid
[function]
[call site]
00038
cert.extensions.get_extension_for_oid
[function]
[call site]
00039
sigstore._utils.cert_is_root_ca
[function]
[call site]
00040
sigstore._utils.cert_is_ca
[function]
[call site]
00041
cert.verify_directly_issued_by
[function]
[call site]
00042
_logger.warning
[function]
[call site]
00043
<builtin>.len
[function]
[call site]
00044
sigstore.models.TransparencyLogEntry.__init__
[function]
[call site]
00045
sigstore.models.TransparencyLogEntry._validate
[function]
[call site]
00046
_logger.debug
[function]
[call site]
00047
model_signing._signing.sign_sigstore.Signature.__init__
[function]
[call site]
00048
pathlib.Path
[function]
[call site]
00049
model_signing._signing.sign_sigstore_pb.Signature.read
[function]
[call site]
00050
path.read_text
[function]
[call site]
00051
json.loads
[function]
[call site]
00052
sigstore_models.bundle.v1.Bundle.from_dict
[function]
[call site]
00053
model_signing._signing.sign_sigstore_pb.Signature.__init__
[function]
[call site]
00054
model_signing._signing.signing.Verifier.verify
[function]
[call site]
00055
model_signing._signing.sign_sigstore.Verifier._verify_signed_content
[function]
[call site]
00056
typing.cast
[function]
[call site]
00057
sigstore.verify.verifier.Verifier.verify_dsse
[function]
[call site]
00058
sigstore.verify.verifier.Verifier._verify_common_signing_cert
[function]
[call site]
00059
OpenSSL.crypto.X509Store
[function]
[call site]
00060
OpenSSL.crypto.X509Store.set_flags
[function]
[call site]
00061
OpenSSL.crypto.X509Store.add_cert
[function]
[call site]
00062
sigstore.verify.verifier.Verifier._establish_time
[function]
[call site]
00063
sigstore.verify.verifier.Verifier._verify_timestamp_authority
[function]
[call site]
00064
<builtin>.len
[function]
[call site]
00065
<builtin>.len
[function]
[call site]
00066
<builtin>.set
[function]
[call site]
00067
<builtin>.len
[function]
[call site]
00068
<builtin>.len
[function]
[call site]
00069
sigstore.verify.verifier.Verifier._verify_signed_timestamp
[function]
[call site]
00070
certificate_authority.certificates
[function]
[call site]
00071
<builtin>.len
[function]
[call site]
00072
_logger.debug
[function]
[call site]
00073
rfc3161_client.VerifierBuilder
[function]
[call site]
00074
rfc3161_client.VerifierBuilder.tsa_certificate
[function]
[call site]
00075
builder.add_intermediate_certificate
[function]
[call site]
00076
builder.build
[function]
[call site]
00077
verifier.verify_message
[function]
[call site]
00078
_logger.debug
[function]
[call site]
00079
_logger.debug
[function]
[call site]
00080
verified_timestamps.extend
[function]
[call site]
00081
verified_timestamps.append
[function]
[call site]
00082
datetime.datetime.fromtimestamp
[function]
[call site]
00083
<builtin>.len
[function]
[call site]
00084
OpenSSL.crypto.X509.from_cryptography
[function]
[call site]
00085
sigstore.verify.verifier.Verifier._verify_chain_at_time
[function]
[call site]
00086
OpenSSL.crypto.X509Store
[function]
[call site]
00087
OpenSSL.crypto.X509Store.set_flags
[function]
[call site]
00088
OpenSSL.crypto.X509Store.add_cert
[function]
[call site]
00089
OpenSSL.crypto.X509Store.set_time
[function]
[call site]
00090
OpenSSL.crypto.X509StoreContext
[function]
[call site]
00091
OpenSSL.crypto.X509StoreContext.get_verified_chain
[function]
[call site]
00092
sigstore._internal.sct.verify_sct
[function]
[call site]
00093
sigstore._internal.sct._get_signed_certificate_timestamp
[function]
[call site]
00094
typing.cast.bundle.signing_certificate.extensions.get_extension_for_class
[function]
[call site]
00095
<builtin>.len
[function]
[call site]
00096
sigstore._internal.sct._get_issuer_cert
[function]
[call site]
00097
sigstore._internal.sct._is_preissuer
[function]
[call site]
00098
issuer.extensions.get_extension_for_class
[function]
[call site]
00099
issuer_cert.public_key
[function]
[call site]
00100
sigstore._internal.sct._cert_is_ca
[function]
[call site]
00101
_logger.debug
[function]
[call site]
00102
sigstore._utils.cert_is_ca
[function]
[call site]
00103
_logger.debug
[function]
[call site]
00104
<builtin>.isinstance
[function]
[call site]
00105
sigstore._utils.key_id
[function]
[call site]
00106
key.public_bytes
[function]
[call site]
00107
hashlib.sha256
[function]
[call site]
00108
typing.NewType
[function]
[call site]
00109
sigstore._internal.sct._pack_digitally_signed
[function]
[call site]
00110
<builtin>.len
[function]
[call site]
00111
sigstore._internal.sct._pack_signed_entry
[function]
[call site]
00112
typing.cast.bundle.signing_certificate.public_bytes
[function]
[call site]
00113
<builtin>.len
[function]
[call site]
00114
fields.append
[function]
[call site]
00115
struct.unpack
[function]
[call site]
00116
<builtin>.len
[function]
[call site]
00117
struct.pack
[function]
[call site]
00118
<builtin>.len
[function]
[call site]
00119
pack_format.format
[function]
[call site]
00120
fields.extend
[function]
[call site]
00121
struct.pack
[function]
[call site]
00122
<builtin>.len
[function]
[call site]
00123
sct.timestamp.replace
[function]
[call site]
00124
struct.pack
[function]
[call site]
00125
timestamp.timestamp
[function]
[call site]
00126
<builtin>.int
[function]
[call site]
00127
<builtin>.len
[function]
[call site]
00128
<builtin>.isinstance
[function]
[call site]
00129
sct.log_id.hex
[function]
[call site]
00130
_logger.debug
[function]
[call site]
00131
ct_keyring.verify
[function]
[call site]
00132
typing.NewType
[function]
[call site]
00133
parent_cert.to_cryptography
[function]
[call site]
00134
typing.cast.bundle.signing_certificate.extensions.get_extension_for_class
[function]
[call site]
00135
typing.cast.bundle.signing_certificate.extensions.get_extension_for_class
[function]
[call site]
00136
sigstore.verify.policy.Identity.verify
[function]
[call site]
00137
sigstore.verify.policy._SingleX509ExtPolicy.verify
[function]
[call site]
00138
typing.cast.bundle.signing_certificate.extensions.get_extension_for_oid
[function]
[call site]
00139
ext.value.decode
[function]
[call site]
00140
typing.cast.bundle.signing_certificate.extensions.get_extension_for_class
[function]
[call site]
00141
san_ext.get_values_for_type
[function]
[call site]
00142
<builtin>.set
[function]
[call site]
00143
san_ext.get_values_for_type
[function]
[call site]
00144
all_sans.update
[function]
[call site]
00145
all_sans.update
[function]
[call site]
00146
on.value.decode
[function]
[call site]
00147
san_ext.get_values_for_type
[function]
[call site]
00148
_logger.debug
[function]
[call site]
00149
typing.cast.bundle.log_entry._verify
[function]
[call site]
00150
typing.cast.bundle.signing_certificate.public_key
[function]
[call site]
00151
typing.cast
[function]
[call site]
00152
sigstore.dsse._verify
[function]
[call site]
00153
sigstore.dsse._pae
[function]
[call site]
00154
<builtin>.len
[function]
[call site]
00155
<builtin>.len
[function]
[call site]
00156
cryptography.hazmat.primitives.asymmetric.ec.ECDSA.__init__
[function]
[call site]
00157
cryptography.hazmat.backends.openssl.backend.Backend.ecdsa_deterministic_supported
[function]
[call site]
00158
typing.cast.verify
[function]
[call site]
00159
sigstore.verify.verifier._validate_dsse_v002_entry_body
[function]
[call site]
00160
sigstore_models.rekor.v2.entry.Entry.from_json
[function]
[call site]
00161
sigstore._utils.sha256_digest
[function]
[call site]
00162
<builtin>.isinstance
[function]
[call site]
00163
<builtin>.isinstance
[function]
[call site]
00164
hashlib.sha256
[function]
[call site]
00165
sigstore._utils._sha256_streaming
[function]
[call site]
00166
hashlib.sha256
[function]
[call site]
00167
<builtin>.bytearray
[function]
[call site]
00168
<builtin>.memoryview
[function]
[call site]
00169
io.readinto
[function]
[call site]
00170
sha256.update
[function]
[call site]
00171
io.readinto
[function]
[call site]
00172
sha256.digest
[function]
[call site]
00173
sigstore_models.rekor.v2.verifier.Signature
[function]
[call site]
00174
base64.b64encode
[function]
[call site]
00175
sigstore.verify.verifier._v2_verifier_from_certificate
[function]
[call site]
00176
typing.cast.bundle.signing_certificate.public_key
[function]
[call site]
00177
<builtin>.isinstance
[function]
[call site]
00178
<builtin>.isinstance
[function]
[call site]
00179
<builtin>.isinstance
[function]
[call site]
00180
<builtin>.isinstance
[function]
[call site]
00181
sigstore_models.rekor.v2.verifier.Verifier
[function]
[call site]
00182
sigstore_models.common.v1.X509Certificate
[function]
[call site]
00183
base64.b64encode
[function]
[call site]
00184
typing.cast.bundle.signing_certificate.public_bytes
[function]
[call site]
00185
sigstore.verify.verifier._validate_dsse_v001_entry_body
[function]
[call site]
00186
rekor_types.Dsse.model_validate_json
[function]
[call site]
00187
sigstore._utils.sha256_digest
[function]
[call site]
00188
typing.cast.bundle._dsse_envelope._inner.payload.digest.hex
[function]
[call site]
00189
rekor_types.dsse.Signature
[function]
[call site]
00190
base64.b64encode
[function]
[call site]
00191
sigstore._utils.base64_encode_pem_cert
[function]
[call site]
00192
typing.NewType
[function]
[call site]
00193
typing.cast.bundle.signing_certificate.public_bytes
[function]
[call site]
00194
base64.b64encode
[function]
[call site]
00195
json.loads
[function]
[call site]
00196
model_signing._signing.signing.dsse_payload_to_manifest
[function]
[call site]
00197
model_signing._signing.signing.dsse_payload_to_manifest_compat
[function]
[call site]
00198
model_signing.manifest.SerializationType.from_args
[function]
[call site]
00199
subclass._from_args
[function]
[call site]
00200
bytes.fromhex
[function]
[call site]
00201
serialization.new_item
[function]
[call site]
00202
items.append
[function]
[call site]
00203
model_signing.manifest.Manifest.__init__
[function]
[call site]
00204
<builtin>.len
[function]
[call site]
00205
model_signing.manifest.SerializationType.from_args
[function]
[call site]
00206
model_signing._hashing.memory.SHA256.__init__
[function]
[call site]
00207
hashlib.sha256
[function]
[call site]
00208
bytes.fromhex
[function]
[call site]
00209
model_signing._hashing.memory.SHA256.update
[function]
[call site]
00210
serialization.new_item
[function]
[call site]
00211
items.append
[function]
[call site]
00212
model_signing._hashing.memory.SHA256.compute
[function]
[call site]
00213
model_signing.manifest.Manifest.__init__
[function]
[call site]
00214
model_signing.verifying.Config._guess_hashing_config
[function]
[call site]
00215
model_signing.hashing.Config.__init__
[function]
[call site]
00216
<builtin>.frozenset
[function]
[call site]
00217
model_signing.hashing.Config.use_file_serialization
[function]
[call site]
00218
model_signing._serialization.file.Serializer.__init__
[function]
[call site]
00219
pathlib.Path
[function]
[call site]
00220
model_signing.hashing.Config._build_file_hasher_factory._factory
[function]
[call site]
00221
model_signing._hashing.io.Blake3FileHasher.__init__
[function]
[call site]
00222
blake3.blake3
[function]
[call site]
00223
model_signing.hashing.Config._build_stream_hasher
[function]
[call site]
00224
model_signing._hashing.memory.SHA256.__init__
[function]
[call site]
00225
model_signing._hashing.memory.BLAKE2.__init__
[function]
[call site]
00226
hashlib.blake2b
[function]
[call site]
00227
model_signing._hashing.memory.BLAKE3.__init__
[function]
[call site]
00228
blake3.blake3
[function]
[call site]
00229
model_signing._hashing.io.SimpleFileHasher.__init__
[function]
[call site]
00230
model_signing.manifest._FileSerialization.__init__
[function]
[call site]
00231
<builtin>.str
[function]
[call site]
00232
model_signing.hashing.Config._build_file_hasher_factory
[function]
[call site]
00233
model_signing.hashing.Config.use_file_serialization
[function]
[call site]
00234
<builtin>.frozenset
[function]
[call site]
00235
model_signing.hashing.Config.__init__
[function]
[call site]
00236
model_signing.hashing.Config.use_shard_serialization
[function]
[call site]
00237
model_signing.hashing.Config.use_file_serialization
[function]
[call site]
00238
model_signing._serialization.file_shard.Serializer.__init__
[function]
[call site]
00239
pathlib.Path
[function]
[call site]
00240
model_signing.hashing.Config._build_sharded_file_hasher_factory._factory
[function]
[call site]
00241
model_signing.hashing.Config._build_stream_hasher
[function]
[call site]
00242
model_signing._hashing.io.ShardedFileHasher.__init__
[function]
[call site]
00243
<builtin>.super
[function]
[call site]
00244
model_signing._hashing.io.ShardedFileHasher.set_shard
[function]
[call site]
00245
model_signing.manifest._ShardSerialization.__init__
[function]
[call site]
00246
<builtin>.str
[function]
[call site]
00247
model_signing.hashing.Config._build_sharded_file_hasher_factory
[function]
[call site]
00248
<builtin>.frozenset
[function]
[call site]
00249
utils._build_hashing_config_from_fdp.add_ignored_paths
[function]
[call site]
00250
model_signing.hashing.Config.add_ignored_paths
[function]
[call site]
00251
<builtin>.set
[function]
[call site]
00252
pathlib.Path
[function]
[call site]
00253
pathlib.Path
[function]
[call site]
00254
full.relative_to
[function]
[call site]
00255
newset.add
[function]
[call site]
00256
model_signing.manifest.Manifest.resource_descriptors
[function]
[call site]
00257
<builtin>.sorted
[function]
[call site]
00258
<builtin>.str
[function]
[call site]
00259
model_signing.hashing.Config.hash
[function]
[call site]
00260
pathlib.Path
[function]
[call site]
00261
full.relative_to
[function]
[call site]
00262
ignored_paths.append
[function]
[call site]
00263
ignored_paths.extend
[function]
[call site]
00264
model_signing._serialization.file.Serializer.set_allow_symlinks
[function]
[call site]
00265
pathlib.Path
[function]
[call site]
00266
model_signing.hashing.Config._build_file_hasher_factory._factory
[function]
[call site]
00267
model_signing.manifest._FileSerialization.__init__
[function]
[call site]
00268
model_signing._serialization.file_shard.Serializer.set_allow_symlinks
[function]
[call site]
00269
pathlib.Path
[function]
[call site]
00270
model_signing.hashing.Config._build_sharded_file_hasher_factory._factory
[function]
[call site]
00271
model_signing.manifest._ShardSerialization.__init__
[function]
[call site]
00272
model_signing._serialization.file_shard.Serializer.serialize
[function]
[call site]
00273
itertools.chain
[function]
[call site]
00274
model_path.glob
[function]
[call site]
00275
model_signing._serialization.serialization.should_ignore
[function]
[call site]
00276
path.is_relative_to
[function]
[call site]
00277
<builtin>.any
[function]
[call site]
00278
model_signing._serialization.serialization.check_file_or_directory
[function]
[call site]
00279
path.is_symlink
[function]
[call site]
00280
path.is_file
[function]
[call site]
00281
path.is_dir
[function]
[call site]
00282
path.is_file
[function]
[call site]
00283
model_signing._serialization.file_shard.Serializer._get_shards
[function]
[call site]
00284
path.stat
[function]
[call site]
00285
model_signing._serialization.file_shard._endpoints
[function]
[call site]
00286
<builtin>.range
[function]
[call site]
00287
shards.append
[function]
[call site]
00288
shards.extend
[function]
[call site]
00289
concurrent.futures.ThreadPoolExecutor
[function]
[call site]
00290
tpe.submit
[function]
[call site]
00291
concurrent.futures.as_completed
[function]
[call site]
00292
future.result
[function]
[call site]
00293
manifest_items.append
[function]
[call site]
00294
os.path.relpath
[function]
[call site]
00295
rp.startswith
[function]
[call site]
00296
pathlib.Path
[function]
[call site]
00297
rel_ignore_paths.append
[function]
[call site]
00298
pathlib.Path
[function]
[call site]
00299
model_signing.hashing.Config._build_sharded_file_hasher_factory._factory
[function]
[call site]
00300
model_signing.manifest._ShardSerialization.__init__
[function]
[call site]
00301
<builtin>.list
[function]
[call site]
00302
<builtin>.frozenset
[function]
[call site]
00303
model_path.resolve
[function]
[call site]
00304
os.path.basename
[function]
[call site]
00305
model_signing.manifest.Manifest.__init__
[function]
[call site]
00306
model_signing._serialization.file.Serializer.serialize
[function]
[call site]
00307
itertools.chain
[function]
[call site]
00308
model_path.glob
[function]
[call site]
00309
model_signing._serialization.serialization.should_ignore
[function]
[call site]
00310
model_signing._serialization.serialization.check_file_or_directory
[function]
[call site]
00311
path.is_file
[function]
[call site]
00312
paths.append
[function]
[call site]
00313
concurrent.futures.ThreadPoolExecutor
[function]
[call site]
00314
tpe.submit
[function]
[call site]
00315
concurrent.futures.as_completed
[function]
[call site]
00316
future.result
[function]
[call site]
00317
manifest_items.append
[function]
[call site]
00318
os.path.relpath
[function]
[call site]
00319
rp.startswith
[function]
[call site]
00320
pathlib.Path
[function]
[call site]
00321
rel_ignore_paths.append
[function]
[call site]
00322
pathlib.Path
[function]
[call site]
00323
model_signing.hashing.Config._build_file_hasher_factory._factory
[function]
[call site]
00324
model_signing.manifest._FileSerialization.__init__
[function]
[call site]
00325
<builtin>.list
[function]
[call site]
00326
<builtin>.frozenset
[function]
[call site]
00327
model_path.resolve
[function]
[call site]
00328
os.path.basename
[function]
[call site]
00329
model_signing.manifest.Manifest.__init__
[function]
[call site]
00330
pathlib.Path
[function]
[call site]
00331
model_signing.verifying.Config._get_manifest_diff
[function]
[call site]
00332
model_signing.manifest.Manifest.resource_descriptors
[function]
[call site]
00333
model_signing.manifest.Manifest.resource_descriptors
[function]
[call site]
00334
actual_hashes.keys
[function]
[call site]
00335
<builtin>.set
[function]
[call site]
00336
<builtin>.set
[function]
[call site]
00337
expected_hashes.keys
[function]
[call site]
00338
diffs.append
[function]
[call site]
00339
<builtin>.sorted
[function]
[call site]
00340
expected_hashes.keys
[function]
[call site]
00341
<builtin>.set
[function]
[call site]
00342
<builtin>.set
[function]
[call site]
00343
actual_hashes.keys
[function]
[call site]
00344
diffs.append
[function]
[call site]
00345
<builtin>.sorted
[function]
[call site]
00346
actual_hashes.keys
[function]
[call site]
00347
<builtin>.set
[function]
[call site]
00348
expected_hashes.keys
[function]
[call site]
00349
<builtin>.set
[function]
[call site]
00350
<builtin>.sorted
[function]
[call site]
00351
diffs.append
[function]
[call site]
00352