Fuzz introspector: secure_boot_payload
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
60 100 fuzzlib::fuzz_secure_boot_payload call site: 00100 PayloadVerifier::verify
37 15 PayloadVerifier::new call site: 00015 CcEventLogWriter::log_pcr_event
10 58 read_fv_header call site: 00058 TestCase::consume_string
5 92 fv::get_file_from_fv call site: 00092
3 5 PayloadVerifier::new call site: 00005
1 0 EP call site: 00000
1 10 PayloadVerifier::new call site: 00010
1 12 PayloadVerifier::new call site: 00012
1 75 sum16 call site: 00075
1 90 fv::get_file_from_fv call site: 00090 E820Type::from

Fuzzer calltree

0 fuzz_target [function] [call site] 00000
1 fuzzlib::fuzz_secure_boot_payload [function] [call site] 00001
2 PayloadVerifier::new [function] [call site] 00002
3 pread::<PayloadSignHeader> [function] [call site] 00003
3 map_err [function] [call site] 00004
3 TcgEfiSpecIdevent::as_bytes [function] [call site] 00005
4 core::slice::from_raw_parts [function] [call site] 00006
4 size_of::<Self> [function] [call site] 00007
3 Err [function] [call site] 00008
3 size_of::<PayloadSignHeader> [function] [call site] 00009
3 My::len [function] [call site] 00010
3 Err [function] [call site] 00011
3 My::len [function] [call site] 00012
3 Err [function] [call site] 00013
3 My::len [function] [call site] 00014
3 copy_from_slice [function] [call site] 00015
3 My::len [function] [call site] 00016
3 Err [function] [call site] 00017
3 CcEventLogWriter::new [function] [call site] 00018
4 TcgEfiSpecIdevent::default [function] [call site] 00019
4 CcEventLogWriter::log_pcr_event [function] [call site] 00020
5 size_of::<TcgPcrEventHeader> [function] [call site] 00021
5 checked_add [function] [call site] 00022
5 My::len [function] [call site] 00023
5 ok_or [function] [call site] 00024
5 checked_add [function] [call site] 00025
5 ok_or [function] [call site] 00026
5 My::len [function] [call site] 00027
5 Err [function] [call site] 00028
5 My::len [function] [call site] 00029
5 size_of::<TcgPcrEventHeader> [function] [call site] 00030
5 copy_from_slice [function] [call site] 00031
5 TcgEfiSpecIdevent::as_bytes [function] [call site] 00032
5 CcEventLogWriter::write_data [function] [call site] 00033
6 My::len [function] [call site] 00034
6 copy_from_slice [function] [call site] 00035
5 CcEventLogWriter::update_offset [function] [call site] 00036
5 size_of::<TcgPcrEventHeader> [function] [call site] 00037
5 My::len [function] [call site] 00038
5 Ok [function] [call site] 00039
4 TcgEfiSpecIdevent::as_bytes [function] [call site] 00040
5 core::slice::from_raw_parts [function] [call site] 00041
5 size_of::<Self> [function] [call site] 00042
4 Ok [function] [call site] 00043
3 Result::map_err [function] [call site] 00044
3 CcEventLogWriter::new [function] [call site] 00045
3 Result::map_err [function] [call site] 00046
3 Option::encode_to_slice [function] [call site] 00047
3 map_err [function] [call site] 00048
3 My::len [function] [call site] 00049
3 Err [function] [call site] 00050
3 My::len [function] [call site] 00051
3 Err [function] [call site] 00052
3 Ok [function] [call site] 00053
2 PayloadVerifier::get_trust_anchor [function] [call site] 00054
3 fv::get_file_from_fv [function] [call site] 00055
4 read_fv_header [function] [call site] 00056
5 &[u8]::pread [function] [call site] 00057
5 tests::one_ok [function] [call site] 00058
6 TdVE::run [function] [call site] 00059
7 x86::io::outb [function] [call site] 00060
7 x86::io::inb [function] [call site] 00061
6 test_vector_file [function] [call site] 00062
6 TestCase::consume_string [function] [call site] 00063
7 TestCase::consume_optional_string [function] [call site] 00064
8 Some [function] [call site] 00065
8 compile_time_assert_clone [function] [call site] 00066
7 Option::unwrap_or_else [function] [call site] 00067
6 Ok [function] [call site] 00068
5 My::len [function] [call site] 00069
5 My::len [function] [call site] 00070
5 FirmwareVolumeHeader::validate_checksum [function] [call site] 00071
6 sum16 [function] [call site] 00072
7 My::len [function] [call site] 00073
7 u8::wrapping_add [function] [call site] 00074
7 My::len [function] [call site] 00075
7 u8::wrapping_add [function] [call site] 00076
6 FirmwareVolumeHeader::as_bytes [function] [call site] 00077
7 core::ptr::slice_from_raw_parts [function] [call site] 00078
7 size_of::<Self> [function] [call site] 00079
5 Some [function] [call site] 00080
4 Files::parse [function] [call site] 00081
5 My::len [function] [call site] 00082
5 Some [function] [call site] 00083
4 FfsFileHeaderType::validate [function] [call site] 00084
5 FirmwareVolumeHeader::validate_checksum [function] [call site] 00085
5 FirmwareVolumeHeader::validate_checksum [function] [call site] 00086
6 sum16 [function] [call site] 00087
6 FirmwareVolumeHeader::as_bytes [function] [call site] 00088
4 CommonSectionHeaderType::r#type [function] [call site] 00089
4 TdVE::get_name [function] [call site] 00090
5 E820Type::from [function] [call site] 00091
4 Guid::as_bytes [function] [call site] 00092
5 core::ptr::slice_from_raw_parts [function] [call site] 00093
5 size_of::<Self> [function] [call site] 00094
5 try_into [function] [call site] 00095
5 unwrap [function] [call site] 00096
4 Some [function] [call site] 00097
3 Option::ok_or [function] [call site] 00098
2 is_ok [function] [call site] 00099
2 Result::is_ok [function] [call site] 00100
2 Document::as_ref [function] [call site] 00101
2 &[u8]::unwrap [function] [call site] 00102
2 verify [function] [call site] 00103
3 !::bench_function [function] [call site] 00104
3 AsChunks::into_iter [function] [call site] 00105
4 AsChunksIter [function] [call site] 00106
4 chunks_exact [function] [call site] 00107
3 UnparsedPublicKey::new [function] [call site] 00108
3 PayloadVerifier::verify [function] [call site] 00109
4 PayloadVerifier::verify_public_key [function] [call site] 00110
5 fv::get_file_from_fv [function] [call site] 00111
5 Option::ok_or [function] [call site] 00112
5 gread::<CfvPubKeyFileHeader> [function] [call site] 00113
5 unwrap [function] [call site] 00114
5 TcgEfiSpecIdevent::as_bytes [function] [call site] 00115
5 My::len [function] [call site] 00116
5 Err [function] [call site] 00117
5 digest::digest [function] [call site] 00118
6 My::len [function] [call site] 00119
6 extend_from_slice [function] [call site] 00120
6 sha2::Sha384::new [function] [call site] 00121
7 TcgEfiSpecIdevent::default [function] [call site] 00122
7 CcEventLogWriter::log_pcr_event [function] [call site] 00123
7 TcgEfiSpecIdevent::as_bytes [function] [call site] 00124
7 Ok [function] [call site] 00125
6 Context::update [function] [call site] 00126
7 Context::update_internal [function] [call site] 00127
8 Context::update_internal [function] [call site] 00128
9 Context::update_internal [function] [call site] 00129
9 Context::update_internal [function] [call site] 00130
8 Context::update_internal [function] [call site] 00131
7 untrusted::Input::as_flattened [function] [call site] 00132
6 Result::finalize [function] [call site] 00133
6 Ok [function] [call site] 00134
6 hex::encode [function] [call site] 00135
7 Self::encode [function] [call site] 00136
8 Self::encode [function] [call site] 00137
5 Document::as_ref [function] [call site] 00138
5 Err [function] [call site] 00139
5 Ok [function] [call site] 00140
4 PayloadVerifier::verify_signature [function] [call site] 00141
5 UnparsedPublicKey::new [function] [call site] 00142
5 PayloadVerifier::verify [function] [call site] 00143
6 PayloadVerifier::verify_public_key [function] [call site] 00144
6 PayloadVerifier::verify_signature [function] [call site] 00145
6 Ok [function] [call site] 00146
5 Result::map_err [function] [call site] 00147
4 Ok [function] [call site] 00148
3 Result::unwrap [function] [call site] 00149
2 is_ok [function] [call site] 00150
2 unwrap [function] [call site] 00151
2 PayloadVerifier::get_payload_svn [function] [call site] 00152
2 PayloadVerifier::get_payload_image [function] [call site] 00153
3 pread::<PayloadSignHeader> [function] [call site] 00154
3 map_err [function] [call site] 00155
3 size_of::<PayloadSignHeader> [function] [call site] 00156
3 My::len [function] [call site] 00157
3 Err [function] [call site] 00158
3 Ok [function] [call site] 00159
3 size_of::<PayloadSignHeader> [function] [call site] 00160