Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
38	57	model_signing._signing.signing.Verifier.verify	call site: 00057	sigstore.verify.verifier.Verifier.verify_dsse
30	166	sigstore._utils.sha256_digest	call site: 00166	sigstore.verify.verifier._validate_dsse_v001_entry_body
25	23	...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key.TestOneInput	call site: 00023	sigstore.models.Bundle.__init__
25	140	sigstore.verify.policy._SingleX509ExtPolicy.verify	call site: 00140	sigstore.verify.verifier._validate_dsse_v002_entry_body
19	96	sigstore._internal.sct._get_signed_certificate_timestamp	call site: 00096	sigstore._internal.sct._pack_digitally_signed
16	123	sigstore._internal.sct._pack_signed_entry	call site: 00123	sigstore.verify.policy.Identity.verify
4	201	model_signing.manifest.SerializationType.from_args	call site: 00201	bytes.fromhex
3	215	model_signing._signing.signing.dsse_payload_to_manifest	call site: 00215	model_signing.verifying.Config._guess_hashing_config
2	1	...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key.TestOneInput	call site: 00001	tempfile.TemporaryDirectory
2	117	sigstore._internal.sct._pack_signed_entry	call site: 00117	.len
2	198	model_signing._signing.signing.Verifier.verify	call site: 00198	model_signing._signing.signing.dsse_payload_to_manifest_compat
2	224	model_signing.verifying.Config.verify	call site: 00224	model_signing.manifest.Manifest.resource_descriptors

Fuzzer calltree


         ...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key.TestOneInput

[function] [call site] 00000


           atheris.FuzzedDataProvider

[function] [call site] 00001


           tempfile.TemporaryDirectory

[function] [call site] 00002


           tempfile.TemporaryDirectory

[function] [call site] 00003


           pathlib.Path

[function] [call site] 00004


           utils.create_fuzz_files

[function] [call site] 00005


           utils.any_files

[function] [call site] 00006


           <builtin>.str

[function] [call site] 00007


           os.path.join

[function] [call site] 00008


           ...model-transparency.tests.fuzzing.fuzz_sign_verify_with_valid_key._pick_key_spec

[function] [call site] 00009


             <builtin>.len

[function] [call site] 00010


             fdp.ConsumeIntInRange

[function] [call site] 00011


           utils._build_hashing_config_from_fdp

[function] [call site] 00012


           scfg.set_hashing_config

[function] [call site] 00013


           scfg.use_elliptic_key_signer

[function] [call site] 00014


           signer.sign

[function] [call site] 00015


           model_signing.verifying.Config.__init__

[function] [call site] 00016


           model_signing.verifying.Config.set_hashing_config

[function] [call site] 00017


           model_signing.verifying.Config.use_elliptic_key_verifier

[function] [call site] 00018


             pathlib.Path

[function] [call site] 00019


             model_signing._signing.sign_ec_key.Verifier.__init__

[function] [call site] 00020


               public_key_path.read_bytes

[function] [call site] 00021


               model_signing._signing.sign_ec_key._check_supported_ec_key

[function] [call site] 00022


           model_signing.verifying.Config.verify

[function] [call site] 00023


             pathlib.Path

[function] [call site] 00024


             model_signing._signing.sign_sigstore.Signature.read

[function] [call site] 00025


               path.read_text

[function] [call site] 00026


               sigstore.models.Bundle.from_json

[function] [call site] 00027


                 sigstore_models.bundle.v1.Bundle.from_json

[function] [call site] 00028


                 sigstore.models.Bundle.__init__

[function] [call site] 00029


                   sigstore.models.Bundle._verify

[function] [call site] 00030


                     enum.Enum.__init__

[function] [call site] 00031


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00032


                     cryptography.hazmat.bindings._rust.x509.load_der_x509_certificate

[function] [call site] 00033


                     sigstore._utils.cert_is_leaf

[function] [call site] 00034


                       sigstore._utils.cert_is_ca

[function] [call site] 00035


                         cert.extensions.get_extension_for_oid

[function] [call site] 00036


                         cert.extensions.get_extension_for_oid

[function] [call site] 00037


                       cert.extensions.get_extension_for_oid

[function] [call site] 00038


                       cert.extensions.get_extension_for_oid

[function] [call site] 00039


                     sigstore._utils.cert_is_root_ca

[function] [call site] 00040


                       sigstore._utils.cert_is_ca

[function] [call site] 00041


                       cert.verify_directly_issued_by

[function] [call site] 00042


                     _logger.warning

[function] [call site] 00043


                     <builtin>.len

[function] [call site] 00044


                     sigstore.models.TransparencyLogEntry.__init__

[function] [call site] 00045


                       sigstore.models.TransparencyLogEntry._validate

[function] [call site] 00046


                     _logger.debug

[function] [call site] 00047


               model_signing._signing.sign_sigstore.Signature.__init__

[function] [call site] 00048


             pathlib.Path

[function] [call site] 00049


             model_signing._signing.sign_sigstore_pb.Signature.read

[function] [call site] 00050


               path.read_text

[function] [call site] 00051


               json.loads

[function] [call site] 00052


               sigstore_models.bundle.v1.Bundle.from_dict

[function] [call site] 00053


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00054


             model_signing._signing.signing.Verifier.verify

[function] [call site] 00055


               model_signing._signing.signing.Verifier._verify_signed_content

[function] [call site] 00056


               model_signing._signing.sign_sigstore.Verifier._verify_signed_content

[function] [call site] 00057


                 typing.cast

[function] [call site] 00058


                 sigstore.verify.verifier.Verifier.verify_dsse

[function] [call site] 00059


                   sigstore.verify.verifier.Verifier._verify_common_signing_cert

[function] [call site] 00060


                     OpenSSL.crypto.X509Store

[function] [call site] 00061


                     OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00062


                     OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00063


                     sigstore.verify.verifier.Verifier._establish_time

[function] [call site] 00064


                       sigstore.verify.verifier.Verifier._verify_timestamp_authority

[function] [call site] 00065


                         <builtin>.len

[function] [call site] 00066


                         <builtin>.len

[function] [call site] 00067


                         <builtin>.set

[function] [call site] 00068


                         <builtin>.len

[function] [call site] 00069


                         <builtin>.len

[function] [call site] 00070


                         sigstore.verify.verifier.Verifier._verify_signed_timestamp

[function] [call site] 00071


                           certificate_authority.certificates

[function] [call site] 00072


                           <builtin>.len

[function] [call site] 00073


                           _logger.debug

[function] [call site] 00074


                           rfc3161_client.VerifierBuilder

[function] [call site] 00075


                           rfc3161_client.VerifierBuilder.tsa_certificate

[function] [call site] 00076


                           builder.add_intermediate_certificate

[function] [call site] 00077


                           builder.build

[function] [call site] 00078


                           verifier.verify_message

[function] [call site] 00079


                           _logger.debug

[function] [call site] 00080


                           _logger.debug

[function] [call site] 00081


                       verified_timestamps.extend

[function] [call site] 00082


                       verified_timestamps.append

[function] [call site] 00083


                       datetime.datetime.fromtimestamp

[function] [call site] 00084


                     <builtin>.len

[function] [call site] 00085


                     OpenSSL.crypto.X509.from_cryptography

[function] [call site] 00086


                     sigstore.verify.verifier.Verifier._verify_chain_at_time

[function] [call site] 00087


                       OpenSSL.crypto.X509Store

[function] [call site] 00088


                       OpenSSL.crypto.X509Store.set_flags

[function] [call site] 00089


                       OpenSSL.crypto.X509Store.add_cert

[function] [call site] 00090


                       OpenSSL.crypto.X509Store.set_time

[function] [call site] 00091


                       OpenSSL.crypto.X509StoreContext

[function] [call site] 00092


                       OpenSSL.crypto.X509StoreContext.get_verified_chain

[function] [call site] 00093


                     sigstore._internal.sct.verify_sct

[function] [call site] 00094


                       sigstore._internal.sct._get_signed_certificate_timestamp

[function] [call site] 00095


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00096


                         <builtin>.len

[function] [call site] 00097


                       sigstore._internal.sct._get_issuer_cert

[function] [call site] 00098


                         sigstore._internal.sct._is_preissuer

[function] [call site] 00099


                           issuer.extensions.get_extension_for_class

[function] [call site] 00100


                       issuer_cert.public_key

[function] [call site] 00101


                       sigstore._internal.sct._cert_is_ca

[function] [call site] 00102


                         _logger.debug

[function] [call site] 00103


                         sigstore._utils.cert_is_ca

[function] [call site] 00104


                         _logger.debug

[function] [call site] 00105


                       <builtin>.isinstance

[function] [call site] 00106


                       sigstore._utils.key_id

[function] [call site] 00107


                         key.public_bytes

[function] [call site] 00108


                         hashlib.sha256

[function] [call site] 00109


                         typing.NewType

[function] [call site] 00110


                       sigstore._internal.sct._pack_digitally_signed

[function] [call site] 00111


                         <builtin>.len

[function] [call site] 00112


                         sigstore._internal.sct._pack_signed_entry

[function] [call site] 00113


                           typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00114


                           <builtin>.len

[function] [call site] 00115


                           fields.append

[function] [call site] 00116


                           struct.unpack

[function] [call site] 00117


                           <builtin>.len

[function] [call site] 00118


                           struct.pack

[function] [call site] 00119


                           <builtin>.len

[function] [call site] 00120


                           pack_format.format

[function] [call site] 00121


                           fields.extend

[function] [call site] 00122


                           struct.pack

[function] [call site] 00123


                         <builtin>.len

[function] [call site] 00124


                         sct.timestamp.replace

[function] [call site] 00125


                         struct.pack

[function] [call site] 00126


                         timestamp.timestamp

[function] [call site] 00127


                         <builtin>.int

[function] [call site] 00128


                         <builtin>.len

[function] [call site] 00129


                       <builtin>.isinstance

[function] [call site] 00130


                       sct.log_id.hex

[function] [call site] 00131


                       _logger.debug

[function] [call site] 00132


                       ct_keyring.verify

[function] [call site] 00133


                       typing.NewType

[function] [call site] 00134


                     parent_cert.to_cryptography

[function] [call site] 00135


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00136


                     typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00137


                     sigstore.verify.policy.Identity.verify

[function] [call site] 00138


                       sigstore.verify.policy._SingleX509ExtPolicy.verify

[function] [call site] 00139


                         typing.cast.bundle.signing_certificate.extensions.get_extension_for_oid

[function] [call site] 00140


                         ext.value.decode

[function] [call site] 00141


                       typing.cast.bundle.signing_certificate.extensions.get_extension_for_class

[function] [call site] 00142


                       san_ext.get_values_for_type

[function] [call site] 00143


                       <builtin>.set

[function] [call site] 00144


                       san_ext.get_values_for_type

[function] [call site] 00145


                       all_sans.update

[function] [call site] 00146


                       all_sans.update

[function] [call site] 00147


                       on.value.decode

[function] [call site] 00148


                       san_ext.get_values_for_type

[function] [call site] 00149


                     _logger.debug

[function] [call site] 00150


                     typing.cast.bundle.log_entry._verify

[function] [call site] 00151


                   typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00152


                   typing.cast

[function] [call site] 00153


                   sigstore.dsse._verify

[function] [call site] 00154


                     sigstore.dsse._pae

[function] [call site] 00155


                       <builtin>.len

[function] [call site] 00156


                     <builtin>.len

[function] [call site] 00157


                     cryptography.hazmat.primitives.asymmetric.ec.ECDSA.__init__

[function] [call site] 00158


                       cryptography.hazmat.backends.openssl.backend.Backend.ecdsa_deterministic_supported

[function] [call site] 00159


                     typing.cast.verify

[function] [call site] 00160


                   sigstore.verify.verifier._validate_dsse_v002_entry_body

[function] [call site] 00161


                     sigstore_models.rekor.v2.entry.Entry.from_json

[function] [call site] 00162


                     sigstore._utils.sha256_digest

[function] [call site] 00163


                       <builtin>.isinstance

[function] [call site] 00164


                       <builtin>.isinstance

[function] [call site] 00165


                       hashlib.sha256

[function] [call site] 00166


                       sigstore._utils._sha256_streaming

[function] [call site] 00167


                         hashlib.sha256

[function] [call site] 00168


                         <builtin>.bytearray

[function] [call site] 00169


                         <builtin>.memoryview

[function] [call site] 00170


                         io.readinto

[function] [call site] 00171


                         sha256.update

[function] [call site] 00172


                         io.readinto

[function] [call site] 00173


                         sha256.digest

[function] [call site] 00174


                     sigstore_models.rekor.v2.verifier.Signature

[function] [call site] 00175


                     base64.b64encode

[function] [call site] 00176


                     sigstore.verify.verifier._v2_verifier_from_certificate

[function] [call site] 00177


                       typing.cast.bundle.signing_certificate.public_key

[function] [call site] 00178


                       <builtin>.isinstance

[function] [call site] 00179


                       <builtin>.isinstance

[function] [call site] 00180


                       <builtin>.isinstance

[function] [call site] 00181


                       <builtin>.isinstance

[function] [call site] 00182


                       sigstore_models.rekor.v2.verifier.Verifier

[function] [call site] 00183


                       sigstore_models.common.v1.X509Certificate

[function] [call site] 00184


                       base64.b64encode

[function] [call site] 00185


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00186


                   sigstore.verify.verifier._validate_dsse_v001_entry_body

[function] [call site] 00187


                     rekor_types.Dsse.model_validate_json

[function] [call site] 00188


                     sigstore._utils.sha256_digest

[function] [call site] 00189


                     typing.cast.bundle._dsse_envelope._inner.payload.digest.hex

[function] [call site] 00190


                     rekor_types.dsse.Signature

[function] [call site] 00191


                     base64.b64encode

[function] [call site] 00192


                     sigstore._utils.base64_encode_pem_cert

[function] [call site] 00193


                       typing.NewType

[function] [call site] 00194


                       typing.cast.bundle.signing_certificate.public_bytes

[function] [call site] 00195


                       base64.b64encode

[function] [call site] 00196


               json.loads

[function] [call site] 00197


               model_signing._signing.signing.dsse_payload_to_manifest

[function] [call site] 00198


                 model_signing._signing.signing.dsse_payload_to_manifest_compat

[function] [call site] 00199


                   model_signing.manifest.SerializationType.from_args

[function] [call site] 00200


                     subclass._from_args

[function] [call site] 00201


                   bytes.fromhex

[function] [call site] 00202


                   serialization.new_item

[function] [call site] 00203


                   items.append

[function] [call site] 00204


                   model_signing.manifest.Manifest.__init__

[function] [call site] 00205


                 <builtin>.len

[function] [call site] 00206


                 model_signing.manifest.SerializationType.from_args

[function] [call site] 00207


                 model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00208


                   hashlib.sha256

[function] [call site] 00209


                 bytes.fromhex

[function] [call site] 00210


                 model_signing._hashing.memory.SHA256.update

[function] [call site] 00211


                 serialization.new_item

[function] [call site] 00212


                 items.append

[function] [call site] 00213


                 model_signing._hashing.memory.SHA256.compute

[function] [call site] 00214


                 model_signing.manifest.Manifest.__init__

[function] [call site] 00215


             model_signing.verifying.Config._guess_hashing_config

[function] [call site] 00216


               <builtin>.frozenset

[function] [call site] 00217


               <builtin>.frozenset

[function] [call site] 00218


             utils._build_hashing_config_from_fdp.add_ignored_paths

[function] [call site] 00219


             model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00220


               <builtin>.sorted

[function] [call site] 00221


               <builtin>.str

[function] [call site] 00222


             model_signing.verifying.Config._hashing_config.hash

[function] [call site] 00223


             model_signing.verifying.Config._get_manifest_diff

[function] [call site] 00224


               actual.resource_descriptors

[function] [call site] 00225


               model_signing.manifest.Manifest.resource_descriptors

[function] [call site] 00226


               actual_hashes.keys

[function] [call site] 00227


               <builtin>.set

[function] [call site] 00228


               <builtin>.set

[function] [call site] 00229


               expected_hashes.keys

[function] [call site] 00230


               diffs.append

[function] [call site] 00231


               <builtin>.sorted

[function] [call site] 00232


               expected_hashes.keys

[function] [call site] 00233


               <builtin>.set

[function] [call site] 00234


               <builtin>.set

[function] [call site] 00235


               actual_hashes.keys

[function] [call site] 00236


               diffs.append

[function] [call site] 00237


               <builtin>.sorted

[function] [call site] 00238


               actual_hashes.keys

[function] [call site] 00239


               <builtin>.set

[function] [call site] 00240


               expected_hashes.keys

[function] [call site] 00241


               <builtin>.set

[function] [call site] 00242


               <builtin>.sorted

[function] [call site] 00243


               diffs.append

[function] [call site] 00244