123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180 |
- #include <openssl/ssl.h>
- #include <openssl/err.h>
- #include <openssl/bio.h>
- #include "fuzzer.h"
- #include "internal/quic_lcidm.h"
- #include "internal/packet.h"
- int FuzzerInitialize(int *argc, char ***argv)
- {
- FuzzerSetRand();
- OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS | OPENSSL_INIT_ASYNC, NULL);
- OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL);
- ERR_clear_error();
- return 1;
- }
- enum {
- CMD_ENROL_ODCID,
- CMD_RETIRE_ODCID,
- CMD_GENERATE_INITIAL,
- CMD_GENERATE,
- CMD_RETIRE,
- CMD_CULL,
- CMD_LOOKUP
- };
- static int get_cid(PACKET *pkt, QUIC_CONN_ID *cid)
- {
- unsigned int cidl;
- if (!PACKET_get_1(pkt, &cidl)
- || cidl > QUIC_MAX_CONN_ID_LEN
- || !PACKET_copy_bytes(pkt, cid->id, cidl))
- return 0;
- cid->id_len = (unsigned char)cidl;
- return 1;
- }
- int FuzzerTestOneInput(const uint8_t *buf, size_t len)
- {
- int rc = 0;
- QUIC_LCIDM *lcidm = NULL;
- PACKET pkt;
- uint64_t arg_opaque, arg_retire_prior_to, seq_num_out;
- unsigned int cmd, lcidl;
- QUIC_CONN_ID arg_cid, cid_out;
- OSSL_QUIC_FRAME_NEW_CONN_ID ncid_frame;
- int did_retire;
- void *opaque_out;
- if (!PACKET_buf_init(&pkt, buf, len))
- goto err;
- if (!PACKET_get_1(&pkt, &lcidl)
- || lcidl > QUIC_MAX_CONN_ID_LEN) {
- rc = -1;
- goto err;
- }
- if ((lcidm = ossl_quic_lcidm_new(NULL, lcidl)) == NULL) {
- rc = -1;
- goto err;
- }
- while (PACKET_remaining(&pkt) > 0) {
- if (!PACKET_get_1(&pkt, &cmd))
- goto err;
- switch (cmd) {
- case CMD_ENROL_ODCID:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)
- || !get_cid(&pkt, &arg_cid)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_enrol_odcid(lcidm, (void *)(uintptr_t)arg_opaque,
- &arg_cid);
- break;
- case CMD_RETIRE_ODCID:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_retire_odcid(lcidm, (void *)(uintptr_t)arg_opaque);
- break;
- case CMD_GENERATE_INITIAL:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_generate_initial(lcidm, (void *)(uintptr_t)arg_opaque,
- &cid_out);
- break;
- case CMD_GENERATE:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_generate(lcidm, (void *)(uintptr_t)arg_opaque,
- &ncid_frame);
- break;
- case CMD_RETIRE:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)
- || !PACKET_get_net_8(&pkt, &arg_retire_prior_to)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_retire(lcidm, (void *)(uintptr_t)arg_opaque,
- arg_retire_prior_to,
- NULL, &cid_out,
- &seq_num_out, &did_retire);
- break;
- case CMD_CULL:
- if (!PACKET_get_net_8(&pkt, &arg_opaque)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_cull(lcidm, (void *)(uintptr_t)arg_opaque);
- break;
- case CMD_LOOKUP:
- if (!get_cid(&pkt, &arg_cid)) {
- rc = -1;
- goto err;
- }
- ossl_quic_lcidm_lookup(lcidm, &arg_cid, &seq_num_out, &opaque_out);
- break;
- default:
- rc = -1;
- goto err;
- }
- }
- err:
- ossl_quic_lcidm_free(lcidm);
- return rc;
- }
- void FuzzerCleanup(void)
- {
- FuzzerClearRand();
- }
|