bls-signatures:cryptofuzz-bls-signatures_optimize_size: Use-of-uninitialized-value in Botan::random_prime

Detailed Report: https://oss-fuzz.com/testcase?key=4843733692317696 Project: bls-signatures Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bls-signaturesoptimizesize Job Type: libfuzzermsanbls-signatures Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

bls-signatures:cryptofuzz-bls-signatures: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6731060031651840 Project: bls-signatures Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bls-signatures Job Type: libfuzzermsanbls-signatures Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NU...

bls-signatures:cryptofuzz-bls-signatures_optimize_size: Use-of-uninitialized-value in cryptofuzz::module::blst_detail::OpBignumCalc_prime

Project: https://github.com/Chia-Network/bls-signatures.git Detailed Report: https://oss-fuzz.com/testcase?key=5684624024535040 Project: bls-signatures Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bls-signaturesoptimizesize Job Type: libfuzzermsanbls-signatures Platform Id: linux Crash Type:...

CVE-2021-21405

Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: "serialized", and "compressed", meaning that BLS signatures can be provided as either of 2 unique byte arrays...