Fuzz introspector: fuzz_sign_with_invalid_key
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
18 55 model_signing._signing.sign_sigstore_pb.pae call site: 00055 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material
10 20 model_signing.signing.Config.use_elliptic_key_signer call site: 00020 model_signing.signing.Config.sign
8 41 model_signing.signing.Config.sign call site: 00041 model_signing._signing.sign_sigstore.Signer._get_identity_token
5 8 ...model-transparency.tests.fuzzing.fuzz_sign_with_invalid_key.TestOneInput call site: 00008 os.path.join
3 0 EP call site: 00000 atheris.FuzzedDataProvider
3 4 ...model-transparency.tests.fuzzing.fuzz_sign_with_invalid_key.TestOneInput call site: 00004 tempfile.TemporaryDirectory
3 50 model_signing.signing.Config.sign call site: 00050 model_signing._signing.sign_sigstore_pb.pae
2 16 model_signing.signing.Config.__init__ call site: 00016 model_signing.signing.Config.use_elliptic_key_signer
2 75 model_signing.signing.Config.sign call site: 00075 cryptography.hazmat.bindings._rust.ObjectIdentifier.to_json

Fuzzer calltree

0 ...model-transparency.tests.fuzzing.fuzz_sign_with_invalid_key.TestOneInput [function] [call site] 00000
1 atheris.FuzzedDataProvider [function] [call site] 00001
1 fdp.ConsumeIntInRange [function] [call site] 00002
1 fdp.ConsumeBytes [function] [call site] 00003
1 tempfile.TemporaryDirectory [function] [call site] 00004
1 tempfile.TemporaryDirectory [function] [call site] 00005
1 pathlib.Path [function] [call site] 00006
1 utils.create_fuzz_files [function] [call site] 00007
1 utils.any_files [function] [call site] 00008
1 os.path.join [function] [call site] 00009
1 <builtin>.open [function] [call site] 00010
1 f.write [function] [call site] 00011
1 <builtin>.str [function] [call site] 00012
1 os.path.join [function] [call site] 00013
1 utils._build_hashing_config_from_fdp [function] [call site] 00014
1 model_signing.signing.Config.__init__ [function] [call site] 00015
2 hashing.Config [function] [call site] 00016
1 model_signing.signing.Config.set_hashing_config [function] [call site] 00017
1 model_signing.signing.Config.use_elliptic_key_signer [function] [call site] 00018
2 pathlib.Path [function] [call site] 00019
2 ec_key.Signer [function] [call site] 00020
1 model_signing.signing.Config.sign [function] [call site] 00021
2 model_signing.signing.Config.use_sigstore_signer [function] [call site] 00022
3 model_signing._signing.sign_sigstore.Signer.__init__ [function] [call site] 00023
4 sigstore.models.ClientTrustConfig.staging [function] [call site] 00024
4 sigstore.models.ClientTrustConfig.from_json [function] [call site] 00025
4 trust_config.read_text [function] [call site] 00026
4 sigstore.models.ClientTrustConfig.production [function] [call site] 00027
4 trust_config.signing_config.get_oidc_url [function] [call site] 00028
4 sigstore.oidc.Issuer [function] [call site] 00029
4 sigstore.sign.SigningContext.from_trust_config [function] [call site] 00030
2 model_signing.signing.Config._hashing_config.hash [function] [call site] 00031
2 model_signing._signing.signing.Payload.__init__ [function] [call site] 00032
3 model_signing._hashing.memory.SHA256.__init__ [function] [call site] 00033
4 hashlib.sha256 [function] [call site] 00034
3 manifest.resource_descriptors [function] [call site] 00035
3 model_signing._hashing.memory.SHA256.update [function] [call site] 00036
3 resources.append [function] [call site] 00037
3 model_signing._hashing.memory.SHA256.compute [function] [call site] 00038
3 statement.ResourceDescriptor [function] [call site] 00039
3 statement.Statement [function] [call site] 00040
2 model_signing._signing.sign_sigstore.Signer.sign [function] [call site] 00041
3 sigstore.dsse.Statement [function] [call site] 00042
3 google.protobuf.json_format.MessageToJson [function] [call site] 00043
3 model_signing._signing.sign_sigstore.Signer._get_identity_token [function] [call site] 00044
4 sigstore.oidc.IdentityToken [function] [call site] 00045
4 sigstore.oidc.detect_credential [function] [call site] 00046
4 sigstore.oidc.IdentityToken [function] [call site] 00047
3 signer.sign_dsse [function] [call site] 00048
3 model_signing._signing.sign_sigstore.Signature.__init__ [function] [call site] 00049
2 model_signing._signing.sign_pkcs11.Signer.sign [function] [call site] 00050
3 google.protobuf.json_format.MessageToJson [function] [call site] 00051
3 ec_key.get_ec_key_hash [function] [call site] 00052
3 model_signing._signing.sign_sigstore_pb.pae [function] [call site] 00053
4 <builtin>.len [function] [call site] 00054
4 <builtin>.len [function] [call site] 00055
3 hash.update [function] [call site] 00056
3 hash.finalize [function] [call site] 00057
3 PyKCS11.Mechanism [function] [call site] 00058
3 asn1crypto.algos.DSASignature.from_p1363 [function] [call site] 00059
3 base64.b64encode [function] [call site] 00060
3 sigstore_models.intoto.Signature [function] [call site] 00061
3 sigstore_models.intoto.Envelope [function] [call site] 00062
3 base64.b64encode [function] [call site] 00063
3 model_signing._signing.sign_sigstore_pb.Signature.__init__ [function] [call site] 00064
3 sigstore_models.bundle.v1.Bundle [function] [call site] 00065
3 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material [function] [call site] 00066
4 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate [function] [call site] 00067
5 sigstore_models.common.v1.X509Certificate [function] [call site] 00068
5 certificate.public_bytes [function] [call site] 00069
4 chain.extend [function] [call site] 00070
4 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate [function] [call site] 00071
4 sigstore_models.bundle.v1.VerificationMaterial [function] [call site] 00072
4 sigstore_models.common.v1.X509CertificateChain [function] [call site] 00073
2 pathlib.Path [function] [call site] 00074
2 model_signing._signing.sign_sigstore.Signature.write [function] [call site] 00075
3 cryptography.hazmat.bindings._rust.ObjectIdentifier.to_json [function] [call site] 00076
3 path.write_text [function] [call site] 00077