3party/mongoose
0
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2024-12-27 15:01:03 +08:00
Code Issues Projects Releases Wiki Activity

Extend fuzzer, access parsed fields

Browse Source
This commit is contained in:
cpq 2023-06-29 16:34:15 +01:00
parent 4b0e34cdf4
commit 1b9b8e3f6c
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
test/fuzz.c
View File

@ -22,6 +22,14 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
struct mg_http_message hm; struct mg_http_message hm;
mg_http_parse((const char *) data, size, &hm); mg_http_parse((const char *) data, size, &hm);
mg_crc32(0, hm.method.ptr, hm.method.len);
mg_crc32(0, hm.uri.ptr, hm.uri.len);
mg_crc32(0, hm.uri.ptr, hm.uri.len);
for (size_t i = 0; i < sizeof(hm.headers) / sizeof(hm.headers[0]) ; i++) {
struct mg_str *k = &hm.headers[i].name, *v = &hm.headers[i].value;
mg_crc32(0, k->ptr, k->len);
mg_crc32(0, v->ptr, v->len);
}
mg_http_parse(NULL, 0, &hm); mg_http_parse(NULL, 0, &hm);
struct mg_str body = mg_str_n((const char *) data, size); struct mg_str body = mg_str_n((const char *) data, size);
@ -34,8 +42,14 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
struct mg_mqtt_message mm; struct mg_mqtt_message mm;
mg_mqtt_parse(data, size, 0, &mm); mg_mqtt_parse(data, size, 0, &mm);
mg_crc32(0, mm.topic.ptr, mm.topic.len);
mg_crc32(0, mm.data.ptr, mm.data.len);
mg_crc32(0, mm.dgram.ptr, mm.dgram.len);
mg_mqtt_parse(NULL, 0, 0, &mm); mg_mqtt_parse(NULL, 0, 0, &mm);
mg_mqtt_parse(data, size, 5, &mm); mg_mqtt_parse(data, size, 5, &mm);
mg_crc32(0, mm.topic.ptr, mm.topic.len);
mg_crc32(0, mm.data.ptr, mm.data.len);
mg_crc32(0, mm.dgram.ptr, mm.dgram.len);
mg_mqtt_parse(NULL, 0, 5, &mm); mg_mqtt_parse(NULL, 0, 5, &mm);
mg_sntp_parse(data, size); mg_sntp_parse(data, size);