2017-05-13 14:50:54 +00:00
|
|
|
#include "fuzz.h"
|
|
|
|
#include "dbrandom.h"
|
|
|
|
#include "session.h"
|
2017-05-18 16:48:46 +00:00
|
|
|
#include "fuzz-wrapfd.h"
|
2017-05-13 14:50:54 +00:00
|
|
|
|
2017-05-18 16:48:46 +00:00
|
|
|
static void setup_fuzzer(void) {
|
2017-05-13 14:50:54 +00:00
|
|
|
svr_setup_fuzzer();
|
|
|
|
}
|
|
|
|
|
|
|
|
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
|
|
|
|
static int once = 0;
|
|
|
|
if (!once) {
|
|
|
|
setup_fuzzer();
|
|
|
|
once = 1;
|
|
|
|
}
|
|
|
|
|
2017-05-18 16:48:46 +00:00
|
|
|
if (fuzzer_set_input(Data, Size) == DROPBEAR_FAILURE) {
|
|
|
|
return 0;
|
|
|
|
}
|
2017-05-13 14:50:54 +00:00
|
|
|
|
2017-05-18 16:48:46 +00:00
|
|
|
int fakesock = 1;
|
|
|
|
wrapfd_add(fakesock, fuzz.input, PLAIN);
|
2017-05-13 14:50:54 +00:00
|
|
|
|
|
|
|
if (setjmp(fuzz.jmp) == 0) {
|
2017-05-18 16:48:46 +00:00
|
|
|
svr_session(fakesock, fakesock);
|
2017-05-13 14:50:54 +00:00
|
|
|
} else {
|
|
|
|
// dropbear_exit jumped here
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|