3party/mongoose
0
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2024-12-28 07:28:13 +08:00
Code Issues Projects Releases Wiki Activity

access only when parsing is valid

Browse Source
This commit is contained in:
Sergio R. Caprile 2023-06-29 18:37:10 -03:00
parent 1b9b8e3f6c
commit dc0f9aca4a
1 changed files with 22 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
test/fuzz.c
View File

@ -21,7 +21,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
mg_dns_parse(NULL, 0, &dm); mg_dns_parse(NULL, 0, &dm);
struct mg_http_message hm; struct mg_http_message hm;
mg_http_parse((const char *) data, size, &hm); if (mg_http_parse((const char *) data, size, &hm) > 0) {
mg_crc32(0, hm.method.ptr, hm.method.len); mg_crc32(0, hm.method.ptr, hm.method.len);
mg_crc32(0, hm.uri.ptr, hm.uri.len); mg_crc32(0, hm.uri.ptr, hm.uri.len);
mg_crc32(0, hm.uri.ptr, hm.uri.len); mg_crc32(0, hm.uri.ptr, hm.uri.len);
@ -30,6 +30,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
mg_crc32(0, k->ptr, k->len); mg_crc32(0, k->ptr, k->len);
mg_crc32(0, v->ptr, v->len); mg_crc32(0, v->ptr, v->len);
} }
}
mg_http_parse(NULL, 0, &hm); mg_http_parse(NULL, 0, &hm);
struct mg_str body = mg_str_n((const char *) data, size); struct mg_str body = mg_str_n((const char *) data, size);
@ -41,15 +42,17 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
mg_url_decode(NULL, 0, tmp, 1, 1); mg_url_decode(NULL, 0, tmp, 1, 1);
struct mg_mqtt_message mm; struct mg_mqtt_message mm;
mg_mqtt_parse(data, size, 0, &mm); if (mg_mqtt_parse(data, size, 0, &mm) == MQTT_OK) {
mg_crc32(0, mm.topic.ptr, mm.topic.len); mg_crc32(0, mm.topic.ptr, mm.topic.len);
mg_crc32(0, mm.data.ptr, mm.data.len); mg_crc32(0, mm.data.ptr, mm.data.len);
mg_crc32(0, mm.dgram.ptr, mm.dgram.len); mg_crc32(0, mm.dgram.ptr, mm.dgram.len);
}
mg_mqtt_parse(NULL, 0, 0, &mm); mg_mqtt_parse(NULL, 0, 0, &mm);
mg_mqtt_parse(data, size, 5, &mm); if (mg_mqtt_parse(data, size, 5, &mm) == MQTT_OK) {
mg_crc32(0, mm.topic.ptr, mm.topic.len); mg_crc32(0, mm.topic.ptr, mm.topic.len);
mg_crc32(0, mm.data.ptr, mm.data.len); mg_crc32(0, mm.data.ptr, mm.data.len);
mg_crc32(0, mm.dgram.ptr, mm.dgram.len); mg_crc32(0, mm.dgram.ptr, mm.dgram.len);
}
mg_mqtt_parse(NULL, 0, 5, &mm); mg_mqtt_parse(NULL, 0, 5, &mm);
mg_sntp_parse(data, size); mg_sntp_parse(data, size);