tests: add an lldp fuzzer

I went through my antique collection of fuzzers the other day
to see which ones I hadn't sent upstream yet. This one
seems to be nice to have and ready to be merged. As far as I can
tell, it hasn't managed to find anything useful yet,
but it's better to be safe than sorry especially when it comes to networking
code :-)
This commit is contained in:
Evgeny Vereshchagin 2018-10-29 15:24:16 +00:00
parent e0f768c356
commit 28ffcec2cb
5 changed files with 45 additions and 0 deletions

40
src/fuzz/fuzz-lldp.c Normal file
View File

@ -0,0 +1,40 @@
/* SPDX-License-Identifier: LGPL-2.1+ */
#include <errno.h>
#include <unistd.h>
#include "sd-event.h"
#include "sd-lldp.h"
#include "fd-util.h"
#include "fuzz.h"
#include "lldp-network.h"
static int test_fd[2] = { -1, -1 };
int lldp_network_bind_raw_socket(int ifindex) {
if (socketpair(AF_UNIX, SOCK_DGRAM | SOCK_NONBLOCK, 0, test_fd) < 0)
return -errno;
return test_fd[0];
}
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
_cleanup_(sd_event_unrefp) sd_event *e = NULL;
_cleanup_(sd_lldp_unrefp) sd_lldp *lldp = NULL;
assert_se(sd_event_new(&e) == 0);
assert_se(sd_lldp_new(&lldp) >= 0);
assert_se(sd_lldp_set_ifindex(lldp, 42) >= 0);
assert_se(sd_lldp_attach_event(lldp, e, 0) >= 0);
assert_se(sd_lldp_start(lldp) >= 0);
assert_se(write(test_fd[1], data, size) == (ssize_t) size);
assert_se(sd_event_run(e, 0) >= 0);
assert_se(sd_lldp_stop(lldp) >= 0);
assert_se(sd_lldp_detach_event(lldp) >= 0);
test_fd[1] = safe_close(test_fd[1]);
return 0;
}

View File

@ -27,6 +27,11 @@ fuzzers += [
libshared],
[]],
[['src/fuzz/fuzz-lldp.c'],
[libshared,
libsystemd_network],
[]],
[['src/fuzz/fuzz-ndisc-rs.c',
'src/libsystemd-network/dhcp-identifier.h',
'src/libsystemd-network/dhcp-identifier.c',

BIN
test/fuzz/fuzz-lldp/basic Normal file

Binary file not shown.

Binary file not shown.

BIN
test/fuzz/fuzz-lldp/oui Normal file

Binary file not shown.