mirror of
https://github.com/clearml/dropbear
synced 2025-01-31 10:57:01 +00:00
36 lines
639 B
C
36 lines
639 B
C
#include "fuzz.h"
|
|
#include "session.h"
|
|
#include "fuzz-wrapfd.h"
|
|
#include "debug.h"
|
|
|
|
static void setup_fuzzer(void) {
|
|
svr_setup_fuzzer();
|
|
//debug_trace = 1;
|
|
}
|
|
|
|
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
|
|
static int once = 0;
|
|
if (!once) {
|
|
setup_fuzzer();
|
|
once = 1;
|
|
}
|
|
|
|
if (fuzzer_set_input(Data, Size) == DROPBEAR_FAILURE) {
|
|
return 0;
|
|
}
|
|
|
|
int fakesock = 1;
|
|
wrapfd_add(fakesock, fuzz.input, PLAIN);
|
|
|
|
m_malloc_set_epoch(1);
|
|
if (setjmp(fuzz.jmp) == 0) {
|
|
svr_session(fakesock, fakesock);
|
|
} else {
|
|
m_malloc_free_epoch(1);
|
|
TRACE(("dropbear_exit longjmped"))
|
|
// dropbear_exit jumped here
|
|
}
|
|
|
|
return 0;
|
|
}
|