Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
252	0	EP	call site: 00000	model_signing.verifying.Config.verify

1


           atheris.FuzzedDataProvider

[function] [call site] 00001

1


           tempfile.TemporaryDirectory

[function] [call site] 00002

1


           tempfile.TemporaryDirectory

[function] [call site] 00003

1


           pathlib.Path

[function] [call site] 00004

1


           utils.create_fuzz_files

[function] [call site] 00005

1


           utils.any_files

[function] [call site] 00006

1


           <builtin>.str

[function] [call site] 00007

1


           os.path.join

[function] [call site] 00008

1


           ...model-transparency.tests.fuzzing.fuzz_sign_then_mutate_verify_with_valid_key._pick_key_spec

[function] [call site] 00009

2


             <builtin>.len

[function] [call site] 00010

2


             fdp.ConsumeIntInRange

[function] [call site] 00011

1


           utils._build_hashing_config_from_fdp

[function] [call site] 00012

1


           scfg.set_hashing_config

[function] [call site] 00013

1


           scfg.use_elliptic_key_signer

[function] [call site] 00014

1


           signer.sign

[function] [call site] 00015

1


           pathlib.Path.rglob

[function] [call site] 00016

1


           p.is_file

[function] [call site] 00017

1


           <builtin>.len

[function] [call site] 00018

1


           fdp.ConsumeIntInRange

[function] [call site] 00019

1


           target.read_bytes

[function] [call site] 00020

1


           fdp.ConsumeIntInRange

[function] [call site] 00021

1


           fdp.ConsumeBytes

[function] [call site] 00022

1


           target.relative_to

[function] [call site] 00023

1


           utils.safe_write

[function] [call site] 00024

1


           model_signing.verifying.Config.__init__

[function] [call site] 00025

1


           model_signing.verifying.Config.set_hashing_config

[function] [call site] 00026

1


           model_signing.verifying.Config.use_elliptic_key_verifier

[function] [call site] 00027

2


             pathlib.Path

[function] [call site] 00028

2


             model_signing._signing.sign_ec_key.Verifier.__init__

[function] [call site] 00029

3


               public_key_path.read_bytes

[function] [call site] 00030

3


               model_signing._signing.sign_ec_key._check_supported_ec_key

[function] [call site] 00031

1


           model_signing.verifying.Config.verify

[function] [call site] 00032

2


             pathlib.Path

[function] [call site] 00033

2


             model_signing._signing.sign_sigstore.Signature.read

[function] [call site] 00034

3


               path.read_text

[function] [call site] 00035

3


               sigstore.models.Bundle.from_json

[function] [call site] 00036

4


                 sigstore_models.bundle.v1.Bundle.from_json

[function] [call site] 00037

4


                 sigstore.models.Bundle.__init__

[function] [call site] 00038

5


                   sigstore.models.Bundle._verify

[function] [call site] 00039

6


                     enum.Enum.__init__

[function] [call site] 00040

6


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00041

6


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00042

6


                     sigstore._utils.cert_is_leaf

[function] [call site] 00043

7


                       sigstore._utils.cert_is_ca

[function] [call site] 00044

8


                         cert.extensions.get_extension_for_oid

[function] [call site] 00045

8


                         cert.extensions.get_extension_for_oid

[function] [call site] 00046

7


                       cert.extensions.get_extension_for_oid

[function] [call site] 00047

7


                       cert.extensions.get_extension_for_oid

[function] [call site] 00048

6


                     sigstore._utils.cert_is_root_ca

[function] [call site] 00049

7


                       sigstore._utils.cert_is_ca

[function] [call site] 00050

7


                       cert.verify_directly_issued_by

[function] [call site] 00051

6


                     _logger.warning

[function] [call site] 00052

6


                     <builtin>.len

[function] [call site] 00053

6


                     sigstore.models.TransparencyLogEntry.__init__

[function] [call site] 00054

7


                       sigstore.models.TransparencyLogEntry._validate

[function] [call site] 00055

6


                     _logger.debug

[function] [call site] 00056

3


               model_signing._signing.sign_sigstore.Signature.__init__

[function] [call site] 00057

2


             pathlib.Path

[function] [call site] 00058

2


             model_signing._signing.sign_sigstore_pb.Signature.read

[function] [call site] 00059

3


               path.read_text

[function] [call site] 00060

3


               json.loads

[function] [call site] 00061

3


               sigstore_models.bundle.v1.Bundle.from_dict

[function] [call site] 00062

3


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00063

2


             model_signing._signing.signing.Verifier.verify

[function] [call site] 00064

3


               model_signing._signing.sign_sigstore.Verifier._verify_signed_content

[function] [call site] 00065

4


                 typing.cast

[function] [call site] 00066

4


                 sigstore.verify.verifier.Verifier.verify_dsse

[function] [call site] 00067

5


                   sigstore.verify.verifier.Verifier._verify_common_signing_cert

[function] [call site] 00068

6


                     OpenSSL.crypto.X509Store

[function] [call site] 00069

6


                     OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00070

6


                     OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00071

6


                     sigstore.verify.verifier.Verifier._establish_time

[function] [call site] 00072

7


                       sigstore.verify.verifier.Verifier._verify_timestamp_authority

[function] [call site] 00073

8


                         <builtin>.len

[function] [call site] 00074

8


                         <builtin>.len

[function] [call site] 00075

8


                         <builtin>.set

[function] [call site] 00076

8


                         <builtin>.len

[function] [call site] 00077

8


                         <builtin>.len

[function] [call site] 00078

8


                         sigstore.verify.verifier.Verifier._verify_signed_timestamp

[function] [call site] 00079

9


                           certificate_authority.certificates

[function] [call site] 00080

9


                           <builtin>.len

[function] [call site] 00081

9


                           _logger.debug

[function] [call site] 00082

9


                           rfc3161_client.VerifierBuilder

[function] [call site] 00083

9


                           rfc3161_client.VerifierBuilder.tsa_certificate

[function] [call site] 00084

9


                           builder.add_intermediate_certificate

[function] [call site] 00085

9


                           builder.build

[function] [call site] 00086

9


                           verifier.verify_message

[function] [call site] 00087

9


                           _logger.debug

[function] [call site] 00088

9


                           _logger.debug

[function] [call site] 00089

7


                       verified_timestamps.extend

[function] [call site] 00090

7


                       verified_timestamps.append

[function] [call site] 00091

7


                       datetime.datetime.fromtimestamp

[function] [call site] 00092

6


                     <builtin>.len

[function] [call site] 00093

6


                     OpenSSL.crypto.X509.from_cryptography

[function] [call site] 00094

6


                     sigstore.verify.verifier.Verifier._verify_chain_at_time

[function] [call site] 00095

7


                       OpenSSL.crypto.X509Store

[function] [call site] 00096

7


                       OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00097

7


                       OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00098

7


                       OpenSSL.crypto.X509Store.set_time

[function] [call site] 00099

7


                       OpenSSL.crypto.X509StoreContext

[function] [call site] 00100

7


                       OpenSSL.crypto.X509StoreContext.get_verified_chain

[function] [call site] 00101

6


                     sigstore._internal.sct.verify_sct

[function] [call site] 00102

7


                       sigstore._internal.sct._get_signed_certificate_timestamp

[function] [call site] 00103

8


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00104

8


                         <builtin>.len

[function] [call site] 00105

7


                       sigstore._internal.sct._get_issuer_cert

[function] [call site] 00106

8


                         sigstore._internal.sct._is_preissuer

[function] [call site] 00107

9


                           issuer.extensions.get_extension_for_class

[function] [call site] 00108

7


                       issuer_cert.public_key

[function] [call site] 00109

7


                       sigstore._internal.sct._cert_is_ca

[function] [call site] 00110

8


                         _logger.debug

[function] [call site] 00111

8


                         sigstore._utils.cert_is_ca

[function] [call site] 00112

8


                         _logger.debug

[function] [call site] 00113

7


                       <builtin>.isinstance

[function] [call site] 00114

7


                       sigstore._utils.key_id

[function] [call site] 00115

8


                         key.public_bytes

[function] [call site] 00116

8


                         hashlib.sha256

[function] [call site] 00117

8


                         typing.NewType

[function] [call site] 00118

7


                       sigstore._internal.sct._pack_digitally_signed

[function] [call site] 00119

8


                         <builtin>.len

[function] [call site] 00120

8


                         sigstore._internal.sct._pack_signed_entry

[function] [call site] 00121

9


                           typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00122

9


                           <builtin>.len

[function] [call site] 00123

9


                           fields.append

[function] [call site] 00124

9


                           struct.unpack

[function] [call site] 00125

9


                           <builtin>.len

[function] [call site] 00126

9


                           struct.pack

[function] [call site] 00127

9


                           <builtin>.len

[function] [call site] 00128

9


                           pack_format.format

[function] [call site] 00129

9


                           fields.extend

[function] [call site] 00130

9


                           struct.pack

[function] [call site] 00131

8


                         <builtin>.len

[function] [call site] 00132

8


                         sct.timestamp.replace

[function] [call site] 00133

8


                         struct.pack

[function] [call site] 00134

8


                         timestamp.timestamp

[function] [call site] 00135

8


                         <builtin>.int

[function] [call site] 00136

8


                         <builtin>.len

[function] [call site] 00137

7


                       <builtin>.isinstance

[function] [call site] 00138

7


                       sct.log_id.hex

[function] [call site] 00139

7


                       _logger.debug

[function] [call site] 00140

7


                       ct_keyring.verify

[function] [call site] 00141

7


                       typing.NewType

[function] [call site] 00142

6


                     parent_cert.to_cryptography

[function] [call site] 00143

6


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00144

6


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00145

6


                     sigstore.verify.policy.Identity.verify

[function] [call site] 00146

7


                       sigstore.verify.policy._SingleX509ExtPolicy.verify

[function] [call site] 00147

8


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_oid

[function] [call site] 00148

8


                         ext.value.decode

[function] [call site] 00149

7


                       typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00150

7


                       san_ext.get_values_for_type

[function] [call site] 00151

7


                       <builtin>.set

[function] [call site] 00152

7


                       san_ext.get_values_for_type

[function] [call site] 00153

7


                       all_sans.update

[function] [call site] 00154

7


                       all_sans.update

[function] [call site] 00155

7


                       on.value.decode

[function] [call site] 00156

7


                       san_ext.get_values_for_type

[function] [call site] 00157

6


                     _logger.debug

[function] [call site] 00158

6


                     typing.cast.bundle.log_entry._verify

[function] [call site] 00159

5


                   typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00160

5


                   typing.cast

[function] [call site] 00161

5


                   sigstore.dsse._verify

[function] [call site] 00162

6


                     sigstore.dsse._pae

[function] [call site] 00163

7


                       <builtin>.len

[function] [call site] 00164

6


                     <builtin>.len

[function] [call site] 00165

6


                     cryptography.hazmat.primitives.asymmetric.ec.ECDSA.__init__

[function] [call site] 00166

7


                       cryptography.hazmat.backends.openssl.backend.Backend.ecdsa_deterministic_supported

[function] [call site] 00167

6


                     typing.cast.verify

[function] [call site] 00168

5


                   sigstore.verify.verifier._validate_dsse_v002_entry_body

[function] [call site] 00169

6


                     sigstore_models.rekor.v2.entry.Entry.from_json

[function] [call site] 00170

6


                     sigstore._utils.sha256_digest

[function] [call site] 00171

7


                       <builtin>.isinstance

[function] [call site] 00172

7


                       <builtin>.isinstance

[function] [call site] 00173

7


                       hashlib.sha256

[function] [call site] 00174

7


                       sigstore._utils._sha256_streaming

[function] [call site] 00175

8


                         hashlib.sha256

[function] [call site] 00176

8


                         <builtin>.bytearray

[function] [call site] 00177

8


                         <builtin>.memoryview

[function] [call site] 00178

8


                         io.readinto

[function] [call site] 00179

8


                         sha256.update

[function] [call site] 00180

8


                         io.readinto

[function] [call site] 00181

8


                         sha256.digest

[function] [call site] 00182

6


                     sigstore_models.rekor.v2.verifier.Signature

[function] [call site] 00183

6


                     base64.b64encode

[function] [call site] 00184

6


                     sigstore.verify.verifier._v2_verifier_from_certificate

[function] [call site] 00185

7


                       typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00186

7


                       <builtin>.isinstance

[function] [call site] 00187

7


                       <builtin>.isinstance

[function] [call site] 00188

7


                       <builtin>.isinstance

[function] [call site] 00189

7


                       <builtin>.isinstance

[function] [call site] 00190

7


                       sigstore_models.rekor.v2.verifier.Verifier

[function] [call site] 00191

7


                       sigstore_models.common.v1.X509Certificate

[function] [call site] 00192

7


                       base64.b64encode

[function] [call site] 00193

7


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00194

5


                   sigstore.verify.verifier._validate_dsse_v001_entry_body

[function] [call site] 00195

6


                     rekor_types.Dsse.model_validate_json

[function] [call site] 00196

6


                     sigstore._utils.sha256_digest

[function] [call site] 00197

6


                     typing.cast.bundle._dsse_envelope._inner.payload.digest.hex

[function] [call site] 00198

6


                     rekor_types.dsse.Signature

[function] [call site] 00199

6


                     base64.b64encode

[function] [call site] 00200

6


                     sigstore._utils.base64_encode_pem_cert

[function] [call site] 00201

7


                       typing.NewType

[function] [call site] 00202

7


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00203

7


                       base64.b64encode

[function] [call site] 00204

3


               json.loads

[function] [call site] 00205

3


               model_signing._signing.signing.dsse_payload_to_manifest

[function] [call site] 00206

4


                 model_signing._signing.signing.dsse_payload_to_manifest_compat

[function] [call site] 00207

5


                   model_signing.manifest.SerializationType.from_args

[function] [call site] 00208

6


                     subclass._from_args

[function] [call site] 00209

5


                   bytes.fromhex

[function] [call site] 00210

5


                   serialization.new_item

[function] [call site] 00211

5


                   items.append

[function] [call site] 00212

5


                   model_signing.manifest.Manifest.__init__

[function] [call site] 00213

4


                 <builtin>.len

[function] [call site] 00214

4


                 model_signing.manifest.SerializationType.from_args

[function] [call site] 00215

4


                 model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00216

5


                   hashlib.sha256

[function] [call site] 00217

4


                 bytes.fromhex

[function] [call site] 00218

4


                 model_signing._hashing.memory.SHA256.update

[function] [call site] 00219

4


                 serialization.new_item

[function] [call site] 00220

4


                 items.append

[function] [call site] 00221

4


                 model_signing._hashing.memory.SHA256.compute

[function] [call site] 00222

4


                 model_signing.manifest.Manifest.__init__

[function] [call site] 00223

2


             model_signing.verifying.Config._guess_hashing_config

[function] [call site] 00224

3


               <builtin>.frozenset

[function] [call site] 00225

3


               <builtin>.frozenset

[function] [call site] 00226

2


             utils._build_hashing_config_from_fdp.add_ignored_paths

[function] [call site] 00227

2


             model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00228

3


               <builtin>.sorted

[function] [call site] 00229

3


               <builtin>.str

[function] [call site] 00230

2


             model_signing.verifying.Config._hashing_config.hash

[function] [call site] 00231

2


             model_signing.verifying.Config._get_manifest_diff

[function] [call site] 00232

3


               actual.resource_descriptors

[function] [call site] 00233

3


               model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00234

3


               actual_hashes.keys

[function] [call site] 00235

3


               <builtin>.set

[function] [call site] 00236

3


               <builtin>.set

[function] [call site] 00237

3


               expected_hashes.keys

[function] [call site] 00238

3


               diffs.append

[function] [call site] 00239

3


               <builtin>.sorted

[function] [call site] 00240

3


               expected_hashes.keys

[function] [call site] 00241

3


               <builtin>.set

[function] [call site] 00242

3


               <builtin>.set

[function] [call site] 00243

3


               actual_hashes.keys

[function] [call site] 00244

3


               diffs.append

[function] [call site] 00245

3


               <builtin>.sorted

[function] [call site] 00246

3


               actual_hashes.keys

[function] [call site] 00247

3


               <builtin>.set

[function] [call site] 00248

3


               expected_hashes.keys

[function] [call site] 00249

3


               <builtin>.set

[function] [call site] 00250

3


               <builtin>.sorted

[function] [call site] 00251

3


               diffs.append

[function] [call site] 00252

Fuzz blockers

Fuzzer calltree