diff --git a/Makefile.am b/Makefile.am
index 79255a85..53652236 100755
--- a/Makefile.am
+++ b/Makefile.am
@@ -1122,7 +1122,8 @@ if FUZZING_ENGINE_LIB
fuzzer_apps = tests/test_bind_null_fuzzer \
tests/test_connect_null_fuzzer \
tests/test_bind_fuzzer \
- tests/test_connect_fuzzer
+ tests/test_connect_fuzzer \
+ tests/test_socket_options_fuzzer
tests_test_bind_null_fuzzer_DEPENDENCIES = src/libzmq.la
tests_test_bind_null_fuzzer_SOURCES = tests/test_bind_null_fuzzer.cpp
@@ -1156,6 +1157,14 @@ tests_test_connect_fuzzer_LDADD = ${TESTUTIL_LIBS} ${FUZZING_ENGINE_LIB} \
tests_test_connect_fuzzer_CPPFLAGS = ${TESTUTIL_CPPFLAGS}
tests_test_connect_fuzzer_CXXFLAGS = -std=c++11
+tests_test_socket_options_fuzzer_DEPENDENCIES = src/libzmq.la
+tests_test_socket_options_fuzzer_SOURCES = tests/test_socket_options_fuzzer.cpp
+tests_test_socket_options_fuzzer_LDADD = ${TESTUTIL_LIBS} ${FUZZING_ENGINE_LIB} \
+ $(top_builddir)/src/.libs/libzmq.a \
+ ${src_libzmq_la_LIBADD}
+tests_test_socket_options_fuzzer_CPPFLAGS = ${TESTUTIL_CPPFLAGS}
+tests_test_socket_options_fuzzer_CXXFLAGS = -std=c++11
+
if HAVE_CURVE
fuzzer_apps += tests/test_bind_curve_fuzzer \
tests/test_connect_curve_fuzzer \
@@ -1213,7 +1222,8 @@ else
test_apps += tests/test_bind_null_fuzzer \
tests/test_connect_null_fuzzer \
tests/test_bind_fuzzer \
- tests/test_connect_fuzzer
+ tests/test_connect_fuzzer \
+ tests/test_socket_options_fuzzer
tests_test_bind_null_fuzzer_SOURCES = tests/test_bind_null_fuzzer.cpp
tests_test_bind_null_fuzzer_LDADD = ${TESTUTIL_LIBS} src/libzmq.la
@@ -1231,6 +1241,10 @@ tests_test_connect_fuzzer_SOURCES = tests/test_connect_fuzzer.cpp
tests_test_connect_fuzzer_LDADD = ${TESTUTIL_LIBS} src/libzmq.la
tests_test_connect_fuzzer_CPPFLAGS = ${TESTUTIL_CPPFLAGS}
+tests_test_socket_options_fuzzer_SOURCES = tests/test_socket_options_fuzzer.cpp
+tests_test_socket_options_fuzzer_LDADD = ${TESTUTIL_LIBS} src/libzmq.la
+tests_test_socket_options_fuzzer_CPPFLAGS = ${TESTUTIL_CPPFLAGS}
+
if HAVE_CURVE
test_apps += tests/test_bind_curve_fuzzer \
tests/test_connect_curve_fuzzer \
diff --git a/tests/test_socket_options_fuzzer.cpp b/tests/test_socket_options_fuzzer.cpp
new file mode 100644
index 00000000..1d436028
--- /dev/null
+++ b/tests/test_socket_options_fuzzer.cpp
@@ -0,0 +1,90 @@
+/*
+ Copyright (c) 2020 Contributors as noted in the AUTHORS file
+
+ This file is part of libzmq, the ZeroMQ core engine in C++.
+
+ libzmq is free software; you can redistribute it and/or modify it under
+ the terms of the GNU Lesser General Public License (LGPL) as published
+ by the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ As a special exception, the Contributors give you permission to link
+ this library with independent modules to produce an executable,
+ regardless of the license terms of these independent modules, and to
+ copy and distribute the resulting executable under terms of your choice,
+ provided that you also meet, for each linked independent module, the
+ terms and conditions of the license of that module. An independent
+ module is a module which is not derived from or based on this library.
+ If you modify this library, you must extend this exception to your
+ version of the library.
+
+ libzmq is distributed in the hope that it will be useful, but WITHOUT
+ ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
+ License for more details.
+
+ You should have received a copy of the GNU Lesser General Public License
+ along with this program. If not, see .
+*/
+
+#ifdef ZMQ_USE_FUZZING_ENGINE
+#include
+#endif
+
+#include
+#include
+
+#include "testutil.hpp"
+#include "testutil_unity.hpp"
+
+extern "C" int LLVMFuzzerTestOneInput (const uint8_t *data, size_t size)
+{
+ setup_test_context ();
+ void *s = test_context_socket (ZMQ_XPUB);
+ int option;
+
+ for (option = ZMQ_AFFINITY; option < ZMQ_BINDTODEVICE + 1; ++option) {
+ uint8_t out[512];
+ size_t out_size = 512;
+
+ zmq_setsockopt(s, option, data, size);
+ zmq_getsockopt(s, option, out, &out_size);
+ }
+
+ test_context_socket_close_zero_linger (s);
+ teardown_test_context ();
+
+ return 0;
+}
+
+#ifndef ZMQ_USE_FUZZING_ENGINE
+void test_socket_options_fuzzer ()
+{
+ uint8_t **data;
+ size_t *len, num_cases = 0;
+ if (fuzzer_corpus_encode (
+ "tests/libzmq-fuzz-corpora/test_socket_options_fuzzer_seed_corpus", &data,
+ &len, &num_cases)
+ != 0)
+ exit (77);
+
+ while (num_cases-- > 0) {
+ TEST_ASSERT_SUCCESS_ERRNO (
+ LLVMFuzzerTestOneInput (data[num_cases], len[num_cases]));
+ free (data[num_cases]);
+ }
+
+ free (data);
+ free (len);
+}
+
+int main (int argc, char **argv)
+{
+ setup_test_environment ();
+
+ UNITY_BEGIN ();
+ RUN_TEST (test_socket_options_fuzzer);
+
+ return UNITY_END ();
+}
+#endif