Fuzz introspector: fuzz_verify_artifact
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
28 9 sigstore.models.Bundle._verify call site: 00009 sigstore.models.LogEntry._from_dict_rekor

Fuzzer calltree

0 ...fuzz_verify_artifact.TestOneInput [function] [call site] 00000
1 atheris.FuzzedDataProvider [function] [call site] 00001
1 fdp.ConsumeIntInRange [function] [call site] 00002
1 fdp.ConsumeUnicodeNoSurrogates [function] [call site] 00003
1 sigstore.models.Bundle.from_json [function] [call site] 00004
2 json.loads [function] [call site] 00005
2 sigstore_protobuf_specs.dev.sigstore.bundle.v1.Bundle.from_dict [function] [call site] 00006
2 sigstore.models.Bundle.__init__ [function] [call site] 00007
3 sigstore.models.Bundle._verify [function] [call site] 00008
4 enum.Enum.__init__ [function] [call site] 00009
4 cryptography.x509.load_der_x509_certificate [function] [call site] 00010
4 cryptography.x509.load_der_x509_certificate [function] [call site] 00011
4 sigstore._utils.cert_is_leaf [function] [call site] 00012
5 sigstore._utils.cert_is_ca [function] [call site] 00013
6 cryptography.x509.load_der_x509_certificate.extensions.get_extension_for_oid [function] [call site] 00014
6 cryptography.x509.load_der_x509_certificate.extensions.get_extension_for_oid [function] [call site] 00015
5 cryptography.x509.load_der_x509_certificate.extensions.get_extension_for_oid [function] [call site] 00016
5 cryptography.x509.load_der_x509_certificate.extensions.get_extension_for_oid [function] [call site] 00017
4 sigstore._utils.cert_is_root_ca [function] [call site] 00018
5 sigstore._utils.cert_is_ca [function] [call site] 00019
5 cert.verify_directly_issued_by [function] [call site] 00020
4 _logger.warning [function] [call site] 00021
4 <builtin>.len [function] [call site] 00022
4 tlog_entry.to_dict [function] [call site] 00023
4 sigstore.models.LogEntry._from_dict_rekor [function] [call site] 00024
5 sigstore_protobuf_specs.dev.sigstore.rekor.v1.TransparencyLogEntry [function] [call site] 00025
5 tlog_entry.from_dict [function] [call site] 00026
5 pydantic.BaseModel.__init__ [function] [call site] 00027
5 inclusion_proof.root_hash.hex [function] [call site] 00029
5 typing.NewType [function] [call site] 00030
5 base64.b64encode [function] [call site] 00031
5 base64.b64encode [function] [call site] 00032
5 typing.NewType [function] [call site] 00033
5 tlog_entry.log_id.key_id.hex [function] [call site] 00034
4 _logger.debug [function] [call site] 00035
1 fdp.ConsumeIntInRange [function] [call site] 00036
1 fdp.ConsumeBytes [function] [call site] 00037