openssl/fuzz/build.info, branch dependabot/github_actions/actions/setup-python-7

Add OSSL_ECHSTORE_read_echconfiglist fuzzer

2026-07-23T13:57:53Z

Fuzz OSSL_ECHSTORE_read_echconfiglist with raw fuzzer input in stage 1. Then fixup the starting bytes to reach deeper code withotu relying only on corpus. Fixup is done for binary encoding only (not base64). Assisted-by: ChatGPT:gpt-5.5 Reviewed-by: Milan Broz Reviewed-by: Nikola Pajkovsky Reviewed-by: Norbert Pocs MergeDate: Thu Jul 23 13:57:54 2026 (Merged from https://github.com/openssl/openssl/pull/32021)

Integrate mfail functionality to fuzz tests

2026-07-15T16:01:30Z

Run the fuzz corpora under mfail in addition to the normal path, so the existing inputs also exercise malloc-failure handling. The fuzz.pl harness sizes the mfail runs to a time budget and, on a leak, bisects down to the exact file and injection point. Adds a budgeted asan/ubsan CI job to run it. Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Wed Jul 15 16:01:43 2026 (Merged from https://github.com/openssl/openssl/pull/30944)

Add PKCS12 fuzzer

2026-01-12T11:28:56Z

Reviewed-by: Kurt Roeckx Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/29572)

Initial slh-dsa fuzzer

2025-02-18T09:24:02Z

Current preforms the following operations 1) Generates arbitrary key pairs 2) Generates key pairs with parameters (both correct and incorrect) based on fuzzer input buffer 3) Exports and re-imports keys, confirming validity 4) Preforms Sign and Verify operations with optional parameters based on fuzzer input buffer Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26708)

Add quic-server fuzz test. Also update fuzz corpora submodule.

2025-02-17T16:27:34Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/26514)

Add an initial ML-DSA fuzzer

2025-02-15T16:13:38Z

Add an initial version of an ML-DSA fuzzer. Exercises various ML-DSA appropriate APIs. Currently it is able to randomly: 1. Attempt to create raw public private keys of various valid and invalid sizes 2. Generate legitimate keys of various sizes using the keygen api 3. Perform sign/verify operations using real generated keys 4. Perform digest sign/verify operations using real generated keys 5. Do an export and import of a key using todata/fromdata 6. Do a comparison of two equal and unequal keys Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26685)

Add an inital ML-KEM fuzzer

2025-02-14T09:50:59Z

Add an inital version of an ML-KEM fuzzer. Exercises various ML-KEM appropriate apis, as a fuzzer does. Currently it is able to randomly: 1) Attempt to create raw public private keys of various valid and invalid sizes 2) Generate legitimate keys of various sizes using the keygen api 3) Preform encap/decap operations using real generated keys 4) Do a shared secret derivation using 2 keys 5) Do an export and import of a key using todata/fromdata 6) Do a comparison of two equal and unequal keys Its not much to start, but it should be fairly extensible Reviewed-by: Viktor Dukhovni Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26657)

Add provider fuzzer

2024-05-24T09:56:41Z

Test recipe 99-test_fuzz_provider.t added. Reviewed-by: Matt Caswell Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/22964)

fuzz: Add attribute certificate fuzz test

2024-04-24T13:08:03Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/15857)

Adding hashtable fuzzer

2024-04-24T02:03:30Z

Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/23671)