Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
41	154	sigstore.oidc.IdentityToken.__init__	call site: 00154	sigstore.oidc.Issuer.identity_token
26	83	sigstore._internal.tuf.TrustUpdater.get_signing_config_path	call site: 00083	sigstore.models.ClientTrustConfig.from_tuf
23	58	sigstore._internal.tuf.TrustUpdater.__init__	call site: 00058	sigstore._internal.tuf.TrustUpdater.get_trusted_root_path
18	127	model_signing._signing.sign_sigstore_pb.pae	call site: 00127	model_signing._signing.sign_pkcs11.CertSigner._get_verification_material
15	1	...model-transparency.tests.fuzzing.fuzz_simple_sigstore.TestOneInput	call site: 00001	sigstore.models.TrustedRoot.from_file
6	46	sigstore._internal.tuf.TrustUpdater.__init__	call site: 00046	sigstore._internal.tuf._get_dirs
4	41	...model-transparency.tests.fuzzing.fuzz_simple_sigstore.TestOneInput	call site: 00041	sigstore.models.ClientTrustConfig.from_tuf
4	149	sigstore.dsse.Statement.__init__	call site: 00149	sigstore.oidc.IdentityToken.__init__
3	54	sigstore._internal.tuf.TrustUpdater.__init__	call site: 00054	urllib.parse.quote
3	122	model_signing.signing.Config.sign	call site: 00122	model_signing._signing.sign_sigstore_pb.pae
2	18	...model-transparency.tests.fuzzing.fuzz_simple_sigstore.TestOneInput	call site: 00018	tempfile.TemporaryDirectory
2	22	...model-transparency.tests.fuzzing.fuzz_simple_sigstore.TestOneInput	call site: 00022	pathlib.Path

Fuzzer calltree


         ...model-transparency.tests.fuzzing.fuzz_simple_sigstore.TestOneInput

[function] [call site] 00000


           atheris.FuzzedDataProvider

[function] [call site] 00001


           fdp.ConsumeIntInRange

[function] [call site] 00002


           fdp.ConsumeBytes

[function] [call site] 00003


           tempfile.NamedTemporaryFile

[function] [call site] 00004


           pathlib.Path

[function] [call site] 00005


           tmp_tr.write

[function] [call site] 00006


           <builtin>.str

[function] [call site] 00007


           sigstore.models.TrustedRoot.from_file

[function] [call site] 00008


             pathlib.Path

[function] [call site] 00009


             pathlib.Path.read_bytes

[function] [call site] 00010


             sigstore_models.trustroot.v1.TrustedRoot.from_json

[function] [call site] 00011


             sigstore.models.TrustedRoot.__init__

[function] [call site] 00012


               sigstore.models.TrustedRoot._verify

[function] [call site] 00013


                 enum.Enum.__init__

[function] [call site] 00014


           os.unlink

[function] [call site] 00015


           tempfile.TemporaryDirectory

[function] [call site] 00016


           tempfile.TemporaryDirectory

[function] [call site] 00017


           tempfile.TemporaryDirectory

[function] [call site] 00018


           tempfile.TemporaryDirectory

[function] [call site] 00019


           pathlib.Path

[function] [call site] 00020


           utils.create_fuzz_files

[function] [call site] 00021


           utils.any_files

[function] [call site] 00022


           pathlib.Path

[function] [call site] 00023


           pathlib.Path

[function] [call site] 00024


           ...model-transparency.tests.fuzzing.fuzz_simple_sigstore._patch_sigstore_get_dirs

[function] [call site] 00025


             importlib.import_module

[function] [call site] 00026


           ...model-transparency.tests.fuzzing.fuzz_simple_sigstore._patch_trust_updater_offline_default_true

[function] [call site] 00027


             importlib.import_module

[function] [call site] 00028


           pathlib.Path.write_bytes

[function] [call site] 00029


           fdp.ConsumeIntInRange

[function] [call site] 00030


           fdp.ConsumeBytes

[function] [call site] 00031


           pathlib.Path.write_bytes

[function] [call site] 00032


           pathlib.Path

[function] [call site] 00033


           fdp.ConsumeBytes

[function] [call site] 00034


           fdp.ConsumeBytes

[function] [call site] 00035


           fdp.ConsumeBytes

[function] [call site] 00036


           utils._build_hashing_config_from_fdp

[function] [call site] 00037


           model_signing.signing.Config.__init__

[function] [call site] 00038


             hashing.Config

[function] [call site] 00039


           model_signing.signing.Config.set_hashing_config

[function] [call site] 00040


           model_signing.signing.Config.use_sigstore_signer

[function] [call site] 00041


             model_signing._signing.sign_sigstore.Signer.__init__

[function] [call site] 00042


               sigstore.models.ClientTrustConfig.staging

[function] [call site] 00043


                 sigstore.models.ClientTrustConfig.from_tuf

[function] [call site] 00044


                   sigstore._internal.tuf.TrustUpdater.__init__

[function] [call site] 00045


                     url.rstrip

[function] [call site] 00046


                     sigstore._internal.tuf._get_dirs

[function] [call site] 00047


                       urllib.parse.quote

[function] [call site] 00048


                       platformdirs.user_data_dir

[function] [call site] 00049


                       pathlib.Path

[function] [call site] 00050


                       platformdirs.user_cache_dir

[function] [call site] 00051


                       pathlib.Path

[function] [call site] 00052


                     artifact_path.exists

[function] [call site] 00053


                     sigstore._utils.read_embedded

[function] [call site] 00054


                       urllib.parse.quote

[function] [call site] 00055


                       importlib_resources.files

[function] [call site] 00056


                       importlib.resources.files

[function] [call site] 00057


                     artifact_path.write_bytes

[function] [call site] 00058


                     _logger.debug

[function] [call site] 00059


                     _logger.debug

[function] [call site] 00060


                     _logger.warning

[function] [call site] 00061


                     sigstore._utils.read_embedded

[function] [call site] 00062


                     bootstrap_root.read_bytes

[function] [call site] 00063


                     tuf.ngclient.Updater

[function] [call site] 00064


                     <builtin>.str

[function] [call site] 00065


                     urllib.parse.urljoin

[function] [call site] 00066


                     <builtin>.str

[function] [call site] 00067


                     tuf.ngclient.UpdaterConfig

[function] [call site] 00068


                     tuf.ngclient.Updater.refresh

[function] [call site] 00069


                   sigstore._internal.tuf.TrustUpdater.get_trusted_root_path

[function] [call site] 00070


                     _logger.debug

[function] [call site] 00071


                     <builtin>.str

[function] [call site] 00072


                     tuf.ngclient.Updater.get_targetinfo

[function] [call site] 00073


                     tuf.ngclient.Updater.find_cached_target

[function] [call site] 00074


                     tuf.ngclient.Updater.download_target

[function] [call site] 00075


                     _logger.debug

[function] [call site] 00076


                   pathlib.Path

[function] [call site] 00077


                   pathlib.Path.read_bytes

[function] [call site] 00078


                   sigstore_models.trustroot.v1.TrustedRoot.from_json

[function] [call site] 00079


                   sigstore._internal.tuf.TrustUpdater.get_signing_config_path

[function] [call site] 00080


                     _logger.debug

[function] [call site] 00081


                     <builtin>.str

[function] [call site] 00082


                     tuf.ngclient.Updater.get_targetinfo

[function] [call site] 00083


                     tuf.ngclient.Updater.find_cached_target

[function] [call site] 00084


                     tuf.ngclient.Updater.download_target

[function] [call site] 00085


                     _logger.debug

[function] [call site] 00086


                   pathlib.Path

[function] [call site] 00087


                   pathlib.Path.read_bytes

[function] [call site] 00088


                   sigstore_models.trustroot.v1.SigningConfig.from_json

[function] [call site] 00089


                   sigstore.models.ClientTrustConfig.__init__

[function] [call site] 00090


                   sigstore_models.trustroot.v1.ClientTrustConfig

[function] [call site] 00091


               sigstore.models.ClientTrustConfig.from_json

[function] [call site] 00092


                 sigstore_models.trustroot.v1.ClientTrustConfig.from_json

[function] [call site] 00093


                 sigstore.models.ClientTrustConfig.__init__

[function] [call site] 00094


               trust_config.read_text

[function] [call site] 00095


               sigstore.models.ClientTrustConfig.production

[function] [call site] 00096


                 sigstore.models.ClientTrustConfig.from_tuf

[function] [call site] 00097


               trust_config.signing_config.get_oidc_url

[function] [call site] 00098


               sigstore.oidc.Issuer.__init__

[function] [call site] 00099


                 requests.Session

[function] [call site] 00100


                 urllib.parse.urljoin

[function] [call site] 00101


                 resp.raise_for_status

[function] [call site] 00102


                 resp.json

[function] [call site] 00103


                 pydantic.BaseModel.model_validate

[function] [call site] 00104


               sigstore.sign.SigningContext.from_trust_config

[function] [call site] 00105


                 sigstore.sign.SigningContext.__init__

[function] [call site] 00106


                 signing_config.get_fulcio

[function] [call site] 00107


                 signing_config.get_tlogs

[function] [call site] 00108


                 signing_config.get_tsas

[function] [call site] 00109


           model_signing.signing.Config.sign

[function] [call site] 00110


             model_signing.signing.Config.use_sigstore_signer

[function] [call site] 00111


             model_signing.signing.Config._hashing_config.hash

[function] [call site] 00112


             model_signing._signing.signing.Payload.__init__

[function] [call site] 00113


               model_signing._hashing.memory.SHA256.__init__

[function] [call site] 00114


                 hashlib.sha256

[function] [call site] 00115


               manifest.resource_descriptors

[function] [call site] 00116


               model_signing._hashing.memory.SHA256.update

[function] [call site] 00117


               resources.append

[function] [call site] 00118


               model_signing._hashing.memory.SHA256.compute

[function] [call site] 00119


               statement.ResourceDescriptor

[function] [call site] 00120


               statement.Statement

[function] [call site] 00121


             model_signing._signing.sign_pkcs11.Signer.sign

[function] [call site] 00122


               google.protobuf.json_format.MessageToJson

[function] [call site] 00123


               ec_key.get_ec_key_hash

[function] [call site] 00124


               model_signing._signing.sign_sigstore_pb.pae

[function] [call site] 00125


                 <builtin>.len

[function] [call site] 00126


                 <builtin>.len

[function] [call site] 00127


               hash.update

[function] [call site] 00128


               hash.finalize

[function] [call site] 00129


               PyKCS11.Mechanism

[function] [call site] 00130


               asn1crypto.algos.DSASignature.from_p1363

[function] [call site] 00131


               base64.b64encode

[function] [call site] 00132


               sigstore_models.intoto.Signature

[function] [call site] 00133


               sigstore_models.intoto.Envelope

[function] [call site] 00134


               base64.b64encode

[function] [call site] 00135


               model_signing._signing.sign_sigstore_pb.Signature.__init__

[function] [call site] 00136


               sigstore_models.bundle.v1.Bundle

[function] [call site] 00137


               model_signing._signing.sign_pkcs11.CertSigner._get_verification_material

[function] [call site] 00138


                 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate

[function] [call site] 00139


                   sigstore_models.common.v1.X509Certificate

[function] [call site] 00140


                   certificate.public_bytes

[function] [call site] 00141


                 chain.extend

[function] [call site] 00142


                 model_signing._signing.sign_pkcs11.CertSigner._get_verification_material._to_protobuf_certificate

[function] [call site] 00143


                 sigstore_models.bundle.v1.VerificationMaterial

[function] [call site] 00144


                 sigstore_models.common.v1.X509CertificateChain

[function] [call site] 00145


             model_signing._signing.sign_sigstore.Signer.sign

[function] [call site] 00146


               sigstore.dsse.Statement.__init__

[function] [call site] 00147


                 <builtin>.isinstance

[function] [call site] 00148


                 pydantic.BaseModel.model_validate_json

[function] [call site] 00149


                 pydantic.BaseModel.model_dump_json

[function] [call site] 00150


               google.protobuf.json_format.MessageToJson

[function] [call site] 00151


               model_signing._signing.sign_sigstore.Signer._get_identity_token

[function] [call site] 00152


                 sigstore.oidc.IdentityToken.__init__

[function] [call site] 00153


                   jwt.decode

[function] [call site] 00154


                   sigstore.oidc.IdentityToken.in_validity_period

[function] [call site] 00155


                     datetime.datetime.now

[function] [call site] 00156


                   _KNOWN_OIDC_ISSUERS.get

[function] [call site] 00157


                   <builtin>.str

[function] [call site] 00158


                   <builtin>.str

[function] [call site] 00159


                   <builtin>.isinstance

[function] [call site] 00160


                   federated_claims.get

[function] [call site] 00161


                   <builtin>.isinstance

[function] [call site] 00162


                 sigstore.oidc.detect_credential

[function] [call site] 00163


                   id.detect_credential

[function] [call site] 00164


                   typing.cast

[function] [call site] 00165


                   sigstore.oidc.IdentityError.raise_from_id

[function] [call site] 00166


                 sigstore.oidc.IdentityToken.__init__

[function] [call site] 00167


                 sigstore.oidc.Issuer.identity_token

[function] [call site] 00168


                   sigstore._internal.oidc.oauth._OAuthFlow.__init__

[function] [call site] 00169


                     sigstore._internal.oidc.oauth._OAuthRedirectServer.__init__

[function] [call site] 00170


                       <builtin>.super

[function] [call site] 00171


                       sigstore._internal.oidc.oauth._OAuthSession.__init__

[function] [call site] 00172


                         uuid.uuid4

[function] [call site] 00173


                         <builtin>.str

[function] [call site] 00174


                         uuid.uuid4

[function] [call site] 00175


                         <builtin>.str

[function] [call site] 00176


                         typing.NewType

[function] [call site] 00177


                         os.urandom

[function] [call site] 00178


                         base64.urlsafe_b64encode

[function] [call site] 00179


                     threading.Thread

[function] [call site] 00180


                   webbrowser.open

[function] [call site] 00181


                   <builtin>.print

[function] [call site] 00182


                   server.enable_oob

[function] [call site] 00183


                   <builtin>.print

[function] [call site] 00184


                   server.is_oob

[function] [call site] 00185


                   time.sleep

[function] [call site] 00186


                   server.auth_response.get

[function] [call site] 00187


                   <builtin>.input

[function] [call site] 00188


                   logging.debug

[function] [call site] 00189


                   resp.raise_for_status

[function] [call site] 00190


                   resp.json

[function] [call site] 00191


                   token_json.get

[function] [call site] 00192


                   sigstore.oidc.IdentityToken.__init__

[function] [call site] 00193


               signer.sign_dsse

[function] [call site] 00194


               model_signing._signing.sign_sigstore.Signature.__init__

[function] [call site] 00195


             pathlib.Path

[function] [call site] 00196


             model_signing._signing.sign_sigstore_pb.Signature.write

[function] [call site] 00197


               path.write_text

[function] [call site] 00198


             model_signing._signing.sign_sigstore.Signature.write

[function] [call site] 00199


               path.write_text

[function] [call site] 00200


           pathlib.Path.exists

[function] [call site] 00201


           verifying.Config

[function] [call site] 00202


           vc.set_hashing_config

[function] [call site] 00203


           vc.use_sigstore_verifier

[function] [call site] 00204


           vc.verify

[function] [call site] 00205