Fuzz introspector: fuzz_oauth1_sig
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
4 66 oauthlib.oauth1.rfc5849.signature._prepare_key_plus call site: {node_id} urllib.parse.quote.encode
3 49 oauthlib.common.safe_string_equals call site: {node_id} .zip
2 2 ...fuzz_oauth1_sig.TestOneInput call site: {node_id} fdp.ConsumeUnicodeNoSurrogates
2 25 oauthlib.oauth1.rfc5849.signature.base_string_uri call site: {node_id} host.lower
1 6 ...fuzz_oauth1_sig.TestOneInput call site: {node_id} fdp.ConsumeUnicodeNoSurrogates
1 17 oauthlib.common.quote call site: {node_id} urllib.parse.quote.decode
1 64 oauthlib.oauth1.rfc5849.signature._prepare_key_plus call site: {node_id} keystr.decode

Fuzzer calltree

0 ...fuzz_oauth1_sig.TestOneInput [function] [call site] 00000
1 atheris.FuzzedDataProvider [function] [call site] 00001
1 ...fuzz_oauth1_sig.FuzzMockRequest.__init__ [function] [call site] 00002
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00003
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00004
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00005
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00006
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00007
1 oauthlib.oauth1.rfc5849.signature.verify_hmac_sha1 [function] [call site] 00008
2 oauthlib.oauth1.rfc5849.signature._verify_hmac [function] [call site] 00009
3 oauthlib.oauth1.rfc5849.signature.normalize_parameters [function] [call site] 00010
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00011
5 <builtin>.isinstance [function] [call site] 00012
5 oauthlib.common.quote [function] [call site] 00013
6 <builtin>.isinstance [function] [call site] 00014
6 urllib.parse.quote.encode [function] [call site] 00015
6 urllib.parse.quote [function] [call site] 00016
6 <builtin>.isinstance [function] [call site] 00017
6 urllib.parse.quote.decode [function] [call site] 00018
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00019
4 key_values.sort [function] [call site] 00020
3 oauthlib.oauth1.rfc5849.signature.base_string_uri [function] [call site] 00021
4 <builtin>.isinstance [function] [call site] 00022
4 urllib.parse.urlparse [function] [call site] 00023
4 scheme.lower [function] [call site] 00024
4 hostname.lower [function] [call site] 00025
4 host.lower [function] [call site] 00026
4 urllib.parse.urlparse [function] [call site] 00027
4 contextlib.suppress [function] [call site] 00028
4 ipaddress.ip_address [function] [call site] 00029
4 <builtin>.isinstance [function] [call site] 00030
4 <builtin>.isinstance [function] [call site] 00031
4 urllib.parse.urlunparse [function] [call site] 00032
4 v.replace [function] [call site] 00033
3 oauthlib.oauth1.rfc5849.signature.signature_base_string [function] [call site] 00034
4 http_method.upper [function] [call site] 00035
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00036
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00037
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00038
3 oauthlib.oauth1.rfc5849.signature._sign_hmac [function] [call site] 00039
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00040
4 oauthlib.oauth1.rfc5849.utils.escape [function] [call site] 00041
4 urllib.parse.quote.encode [function] [call site] 00042
4 urllib.parse.quote.encode [function] [call site] 00043
4 hmac.new [function] [call site] 00044
4 signature.digest [function] [call site] 00045
4 binascii.b2a_base64 [function] [call site] 00046
3 oauthlib.common.safe_string_equals [function] [call site] 00047
4 <builtin>.len [function] [call site] 00048
4 <builtin>.len [function] [call site] 00049
4 <builtin>.zip [function] [call site] 00050
4 <builtin>.ord [function] [call site] 00051
4 <builtin>.ord [function] [call site] 00052
3 log.debug [function] [call site] 00053
1 oauthlib.oauth1.rfc5849.signature.verify_rsa_sha512 [function] [call site] 00054
2 oauthlib.oauth1.rfc5849.signature._verify_rsa [function] [call site] 00055
3 oauthlib.oauth1.rfc5849.signature.normalize_parameters [function] [call site] 00056
3 oauthlib.oauth1.rfc5849.signature.base_string_uri [function] [call site] 00057
3 oauthlib.oauth1.rfc5849.signature.signature_base_string [function] [call site] 00058
3 request.signature.encode [function] [call site] 00059
3 binascii.a2b_base64 [function] [call site] 00060
3 oauthlib.oauth1.rfc5849.signature._get_jwt_rsa_algorithm [function] [call site] 00061
4 jwt.algorithms.RSAAlgorithm [function] [call site] 00062
3 oauthlib.oauth1.rfc5849.signature._prepare_key_plus [function] [call site] 00063
4 <builtin>.isinstance [function] [call site] 00064
4 keystr.decode [function] [call site] 00065
4 alg.prepare_key [function] [call site] 00066
3 urllib.parse.quote.encode [function] [call site] 00067
3 alg.verify [function] [call site] 00068
3 log.debug [function] [call site] 00069
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00070