Fuzz introspector: fuzz_certificate_parse
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
19 75 UA_CertificateUtils_verifyApplicationUri call site: 00075 UA_Bstrstr
11 42 LLVMFuzzerTestOneInput call site: 00042 UA_OpenSSL_LoadCertificate
10 56 UA_CertificateUtils_getKeySize call site: 00056 X509_get_pubkey
6 9 UA_OpenSSL_LoadPemCertificate call site: 00009 X509_get_pubkey
6 35 UA_CertificateUtils_getExpirationDate call site: 00035 musl_tm_to_secs
5 26 UA_STRING call site: 00026 UA_String_copy
4 68 UA_CertificateUtils_checkCA call site: 00068 openSSLCheckCA
3 22 UA_OpenSSL_LoadPemCrl call site: 00022 UA_STRING
1 4 UA_OpenSSL_LoadCertificate call site: 00004 d2i_X509
1 17 UA_OpenSSL_LoadCrl call site: 00017 d2i_X509_CRL
1 32 LLVMFuzzerTestOneInput call site: 00032 UA_clear

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 UA_memoryManager_setLimitFromLast4Bytes [function] [call site] 00001
1 UA_CertificateUtils_getSubjectName [function] [call site] 00002
2 UA_OpenSSL_LoadCertificate [function] [call site] 00003
3 UA_OpenSSL_LoadDerCertificate [function] [call site] 00004
4 d2i_X509 [call site] 00005
3 UA_OpenSSL_LoadPemCertificate [function] [call site] 00006
4 BIO_new_mem_buf [call site] 00007
4 PEM_read_bio_X509 [call site] 00008
4 BIO_free [call site] 00009
3 X509_get_pubkey [call site] 00010
3 X509_free [call site] 00011
3 EVP_PKEY_get_base_id [call site] 00012
3 EVP_PKEY_free [call site] 00013
3 X509_free [call site] 00014
2 X509_get_subject_name [call site] 00015
2 UA_OpenSSL_LoadCrl [function] [call site] 00016
3 UA_OpenSSL_LoadDerCrl [function] [call site] 00017
4 d2i_X509_CRL [call site] 00018
3 UA_OpenSSL_LoadPemCrl [function] [call site] 00019
4 BIO_new_mem_buf [call site] 00020
4 PEM_read_bio_X509_CRL [call site] 00021
4 BIO_free [call site] 00022
2 X509_CRL_get_issuer [call site] 00023
2 X509_NAME_oneline [call site] 00024
2 UA_STRING [function] [call site] 00025
3 strlen [call site] 00026
2 UA_String_copy [function] [call site] 00027
2 X509_free [call site] 00030
2 X509_CRL_free [call site] 00031
1 UA_String_clear(UA_String*) [function] [call site] 00032
1 UA_CertificateUtils_getExpirationDate [function] [call site] 00034
2 UA_OpenSSL_LoadCertificate [function] [call site] 00035
2 X509_getm_notAfter [call site] 00036
2 ASN1_TIME_to_tm [call site] 00037
2 X509_free [call site] 00038
2 musl_tm_to_secs [function] [call site] 00039
3 musl_year_to_secs [function] [call site] 00040
3 musl_month_to_secs [function] [call site] 00041
1 UA_CertificateUtils_getThumbprint [function] [call site] 00042
2 UA_OpenSSL_LoadCertificate [function] [call site] 00043
2 EVP_sha1 [call site] 00044
2 X509_digest [call site] 00045
2 X509_free [call site] 00046
2 X509_free [call site] 00047
2 UA_OpenSSL_LoadCrl [function] [call site] 00048
2 EVP_sha1 [call site] 00049
2 X509_CRL_digest [call site] 00050
2 X509_CRL_free [call site] 00051
2 X509_CRL_free [call site] 00052
2 sprintf [call site] 00053
1 UA_String_clear(UA_String*) [function] [call site] 00054
1 UA_CertificateUtils_getKeySize [function] [call site] 00055
2 UA_OpenSSL_LoadCertificate [function] [call site] 00056
2 X509_get_pubkey [call site] 00057
2 X509_free [call site] 00058
2 EVP_PKEY_get_base_id [call site] 00059
2 EVP_PKEY_get_size [call site] 00060
2 EVP_PKEY_get_base_id [call site] 00061
2 EVP_PKEY_get_size [call site] 00062
2 EVP_PKEY_free [call site] 00063
2 X509_free [call site] 00064
2 EVP_PKEY_free [call site] 00065
2 X509_free [call site] 00066
1 UA_CertificateUtils_checkCA [function] [call site] 00067
2 UA_OpenSSL_LoadCertificate [function] [call site] 00068
2 openSSLCheckCA [function] [call site] 00069
3 X509_get_extension_flags [call site] 00070
3 X509_get_key_usage [call site] 00071
2 X509_free [call site] 00072
1 UA_STRING [function] [call site] 00073
1 UA_CertificateUtils_verifyApplicationUri [function] [call site] 00074
2 UA_OpenSSL_LoadCertificate [function] [call site] 00075
2 X509_get_ext_d2i [call site] 00076
2 X509_free [call site] 00077
2 ossl_check_const_GENERAL_NAME_sk_type [function] [call site] 00078
2 OPENSSL_sk_num [call site] 00079
2 ossl_check_const_GENERAL_NAME_sk_type [function] [call site] 00080
2 OPENSSL_sk_value [call site] 00081
2 X509_free [call site] 00082
2 ossl_check_GENERAL_NAME_sk_type [function] [call site] 00083
2 ossl_check_GENERAL_NAME_freefunc_type [function] [call site] 00084
2 GENERAL_NAME_free [call site] 00085
2 OPENSSL_sk_pop_free [call site] 00086
2 X509_free [call site] 00089
2 ossl_check_GENERAL_NAME_sk_type [function] [call site] 00090
2 ossl_check_GENERAL_NAME_freefunc_type [function] [call site] 00091
2 GENERAL_NAME_free [call site] 00092
2 OPENSSL_sk_pop_free [call site] 00093
2 UA_String_clear [function] [call site] 00094