Matt Johnston
|
a6b2eeb190
|
Fix null pointer dereference removing listeners
|
2020-12-07 20:03:24 +08:00 |
|
Matt Johnston
|
e12ff23e7d
|
fuzz: add an always-failing dropbear_listen() replacement
|
2020-12-06 21:54:01 +08:00 |
|
Matt Johnston
|
007a5925dc
|
fuzz: work around fuzz_connect_remote() limitations
|
2020-12-06 21:27:25 +08:00 |
|
Matt Johnston
|
d439ed26e4
|
Some minor manpage improvements
|
2020-12-05 14:56:53 +08:00 |
|
Matt Johnston
|
f9ff3fa23d
|
fuzz: skip custom mutators with -fsanitize=memory
|
2020-12-05 11:54:53 +08:00 |
|
Matt Johnston
|
2c64335d9c
|
fuzz: make postauth set authdone properly
|
2020-12-03 22:18:51 +08:00 |
|
Matt Johnston
|
286b6b9f80
|
Remove unused cli_authinitialise
|
2020-12-03 21:19:19 +08:00 |
|
Matt Johnston
|
220ba993a2
|
fuzzing - Set postauth user to root since that's what it runs as
|
2020-11-17 19:28:11 +08:00 |
|
Matt Johnston
|
3c88d6536a
|
fuzzing: add workaround getpwuid/getpwnam
|
2020-11-16 22:44:30 +08:00 |
|
Matt Johnston
|
f49b576e93
|
Fix fuzzing build
|
2020-11-15 21:22:08 +08:00 |
|
Matt Johnston
|
8ec9016585
|
Add server postauth fuzzer, wrap connect_remote()
|
2020-11-13 23:18:05 +08:00 |
|
Matt Johnston
|
15ea6d1106
|
Remove accidentally committed abort()
|
2020-11-13 23:16:50 +08:00 |
|
Matt Johnston
|
24cfda9e3c
|
fuzzing - fix some wrong types and -lcrypt on macos
|
2020-11-02 20:33:48 +08:00 |
|
Matt Johnston
|
121e6e6202
|
Fuzzing - get rid of "prefix" for streams
Improved packet generation with sshpacketmutator
|
2020-11-01 23:44:58 +08:00 |
|
Matt Johnston
|
1b6e16ae7c
|
fuzzing - avoid sha1 for random seed every iteration
|
2020-11-01 14:01:37 +08:00 |
|
Matt Johnston
|
b8352f8164
|
Move fuzzer-kex initialisation into a constructor function
Hopefully this can avoid hitting AFL timeouts
https://github.com/google/oss-fuzz/pull/2474
|
2020-10-29 23:00:52 +08:00 |
|
Matt Johnston
|
6aa065b1b4
|
Use SSH packet mutator for preauth too
Get rid of separate client mutator.
Have 0.1% chance of llvm random mutation
Add comments
|
2020-10-29 22:41:37 +08:00 |
|
Matt Johnston
|
6cf29061c2
|
Fix FUZZ_NO_REPLACE_STDERR for fuzz.c
|
2020-10-29 22:14:38 +08:00 |
|
Matt Johnston
|
f92f0777de
|
Merge from main
|
2020-10-29 21:51:41 +08:00 |
|
Matt Johnston
|
9c70e4bed1
|
Added signature for changeset 5879c5829e85
|
2020-10-29 21:40:34 +08:00 |
|
Matt Johnston
|
a51833c51a
|
Added tag DROPBEAR_2020.81 for changeset 4b984c42372d
|
2020-10-29 21:40:27 +08:00 |
|
Matt Johnston
|
d852d69b50
|
Changelog for 2020.81
|
2020-10-29 21:35:50 +08:00 |
|
Matt Johnston
|
1b603069db
|
Fix fuzzing stderr override on os x
|
2020-10-26 23:44:43 +08:00 |
|
Matt Johnston
|
bf4058d1df
|
Preallocate memory for sshpacketmutator. Add fuzzer-client_mutator_nomaths
|
2020-10-26 23:31:24 +08:00 |
|
Matt Johnston
|
4d716b6302
|
crossover works
|
2020-10-26 23:06:41 +08:00 |
|
Matt Johnston
|
1260fbc5cd
|
Fix fuzz-sshpacketmutator to work
|
2020-10-26 22:52:07 +08:00 |
|
Matt Johnston
|
acd6a22a0c
|
Print ascii in printhex too
|
2020-10-26 22:51:44 +08:00 |
|
Matt Johnston
|
4e8a1da551
|
Add first try at fuzzing custom mutator
|
2020-10-25 22:52:36 +08:00 |
|
Matt Johnston
|
754dc50b93
|
merge from main
|
2020-10-25 21:47:42 +08:00 |
|
Matt Johnston
|
c7cfa75e92
|
Disable stderr output for fuzzer by default
|
2020-10-24 22:40:08 +08:00 |
|
Matt Johnston
|
b070bcd570
|
Make "Too many remote algorithms" exit rather than log
It's fatal anyway, makes logs more concise.
|
2020-10-24 19:28:29 +08:00 |
|
Matt Johnston
|
037d26f055
|
Add buf_decrpos()
|
2020-10-24 18:56:45 +08:00 |
|
Matt Johnston
|
cb252296c5
|
Add some more variation to fuzzer random number generation
|
2020-10-23 23:32:44 +08:00 |
|
Matt Johnston
|
f37def57b0
|
Move fuzzing code to fuzz/ subdirectory, improve Makefile.in
|
2020-10-23 23:10:20 +08:00 |
|
Matt Johnston
|
1a208c460b
|
Increase MAX_PROPOSED_ALGO to 50, warn if exceeded
|
2020-10-23 20:53:58 +08:00 |
|
Matt Johnston
|
34f24b1841
|
Fix #ifdef DROPBEAR_FUZZ (caught by linter)
|
2020-10-21 20:49:22 +08:00 |
|
Matt Johnston
|
1a7b944917
|
Load password and key for client fuzzer.
Add fuzz_dump()
|
2020-10-20 23:34:38 +08:00 |
|
Matt Johnston
|
3b400bd64e
|
Don't sort objects, it breaks -lcrypt ordering
|
2020-10-20 23:33:45 +08:00 |
|
Matt Johnston
|
f74baa5830
|
Add ubsan fuzz run to Travis CI too
|
2020-10-19 23:38:11 +08:00 |
|
Matt Johnston
|
4c5b8fb6d6
|
Use Dropbear's random source rather than libtommath's platform
|
2020-10-19 22:49:19 +08:00 |
|
Matt Johnston
|
d5cc5eb25c
|
Avoid passing NULL to memcpy
|
2020-10-19 21:38:20 +08:00 |
|
Matt Johnston
|
9f642e2bd4
|
Fix fuzzer build
|
2020-10-18 23:32:39 +08:00 |
|
Matt Johnston
|
6ca24af24a
|
Merge fuzz branch
|
2020-10-18 22:53:44 +08:00 |
|
Matt Johnston
|
400c7c161f
|
Allocate real file descriptors for fuzz input with dup()
--HG--
branch : fuzz
|
2020-10-18 22:52:24 +08:00 |
|
Matt Johnston
|
5567c238a7
|
Disallow extra kexinit messages
--HG--
branch : fuzz
|
2020-10-18 22:17:54 +08:00 |
|
Matt Johnston
|
33eba22966
|
Add fuzzer-client_nomaths, fix client fuzzer
--HG--
branch : fuzz
|
2020-10-18 15:08:54 +08:00 |
|
Matt Johnston
|
282fc81981
|
Get client fuzzer building and starting (fails straight away)
--HG--
branch : fuzz
|
2020-10-18 12:17:39 +08:00 |
|
Matt Johnston
|
cc1b07dcf1
|
Make wrapfd share a common buffer for all FDs
--HG--
branch : fuzz
|
2020-10-15 22:46:24 +08:00 |
|
Matt Johnston
|
0e3e8db5bf
|
merge from main
--HG--
branch : fuzz
|
2020-10-15 19:55:15 +08:00 |
|
Matt Johnston
|
17873e8c92
|
Avoid gnu extension conditional operator
|
2020-10-08 11:00:04 +08:00 |
|