nssutil contains an ASN.1 DER decoder whose test coverage could be improved. This is going to be interesting, because it takes both an octet stream as well as a template which acts as both a schema for the shape of the expected data and a mapping to C structs/fields/pointers/etc., and the templates are only partially documented. There's been some work on fuzzing the parser for (some of?) the specific templates that we're already using (e.g., bug 1235914), but there may be value in trying to go beyond those.
You need to log in before you can comment on or make changes to this bug.