Skip to main content
  • Home
  • login
  • Browse the archive

    swh mirror partner logo
swh logo
SoftwareHeritage
Software
Heritage
Mirror
Features
  • Search

  • Downloads

  • Save code now

  • Add forge now

  • Help

Revision f6b2ab0ba4fede20d7fdc81a0b281d3470a4d6e9 authored by Jonathan M. Wilbur on 21 August 2024, 02:25:03 UTC, committed by Tomas Mraz on 10 September 2024, 17:17:34 UTC
test: authorityAttributeIdentifier X.509v3 extension
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25244)
1 parent 221e8fa
  • Files
  • Changes
  • 0b326f3
  • /
  • fuzz
  • /
  • quic-srtm.c
Raw File
Cook and download a directory from the Software Heritage Vault

You have requested the cooking of the directory with identifier None into a standard tar.gz archive.

Are you sure you want to continue ?

Download a directory from the Software Heritage Vault

You have requested the download of the directory with identifier None as a standard tar.gz archive.

Are you sure you want to continue ?

Cook and download a revision from the Software Heritage Vault

You have requested the cooking of the history heading to revision with identifier swh:1:rev:f6b2ab0ba4fede20d7fdc81a0b281d3470a4d6e9 into a bare git archive.

Are you sure you want to continue ?

Download a revision from the Software Heritage Vault

You have requested the download of the history heading to revision with identifier swh:1:rev:f6b2ab0ba4fede20d7fdc81a0b281d3470a4d6e9 as a bare git archive.

Are you sure you want to continue ?

Invalid Email !

The provided email is not well-formed.

Download link has expired

The requested archive is no longer available for download from the Software Heritage Vault.

Do you want to cook it again ?

Permalinks

To reference or cite the objects present in the Software Heritage archive, permalinks based on SoftWare Hash IDentifiers (SWHIDs) must be used.
Select below a type of object currently browsed in order to display its associated SWHID and permalink.

  • revision
  • content
revision badge
swh:1:rev:f6b2ab0ba4fede20d7fdc81a0b281d3470a4d6e9
content badge Iframe embedding
swh:1:cnt:9bb5db5d81a8faa2ecc7a505ce48b524e2043f07
quic-srtm.c
/*
 * Copyright 2016-2024 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * https://www.openssl.org/source/license.html
 * or in the file LICENSE in the source distribution.
 */

#include <openssl/ssl.h>
#include <openssl/err.h>
#include <openssl/bio.h>
#include "fuzzer.h"
#include "internal/quic_srtm.h"

int FuzzerInitialize(int *argc, char ***argv)
{
    FuzzerSetRand();
    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS | OPENSSL_INIT_ASYNC, NULL);
    OPENSSL_init_ssl(OPENSSL_INIT_LOAD_SSL_STRINGS, NULL);
    ERR_clear_error();
    return 1;
}

/*
 * Fuzzer input "protocol":
 *   Big endian
 *   Zero or more of:
 *     ADD    - u8(0x00) u64(opaque) u64(seq_num) u128(token)
 *     REMOVE - u8(0x01) u64(opaque) u64(seq_num)
 *     CULL   - u8(0x02) u64(opaque)
 *     LOOKUP - u8(0x03) u128(token) u64(idx)
 */
enum {
    CMD_ADD,
    CMD_REMOVE,
    CMD_CULL,
    CMD_LOOKUP,
    CMD_MAX
};

#define MAX_CMDS 10000

int FuzzerTestOneInput(const uint8_t *buf, size_t len)
{
    int rc = 0;
    QUIC_SRTM *srtm = NULL;
    PACKET pkt;
    unsigned int cmd;
    uint64_t arg_opaque, arg_seq_num, arg_idx;
    QUIC_STATELESS_RESET_TOKEN arg_token;
    size_t limit = 0;

    if ((srtm = ossl_quic_srtm_new(NULL, NULL)) == NULL) {
        rc = -1;
        goto err;
    }

    if (!PACKET_buf_init(&pkt, buf, len))
        goto err;

    while (PACKET_remaining(&pkt) > 0) {
        if (!PACKET_get_1(&pkt, &cmd))
            goto err;

        if (++limit > MAX_CMDS) {
            rc = 0;
            goto err;
        }

        switch (cmd % CMD_MAX) {
        case CMD_ADD:
            if (!PACKET_get_net_8(&pkt, &arg_opaque)
                || !PACKET_get_net_8(&pkt, &arg_seq_num)
                || !PACKET_copy_bytes(&pkt, arg_token.token,
                                      sizeof(arg_token.token)))
                continue; /* just stop */

            ossl_quic_srtm_add(srtm, (void *)(uintptr_t)arg_opaque,
                               arg_seq_num, &arg_token);
            ossl_quic_srtm_check(srtm);
            break;

        case CMD_REMOVE:
            if (!PACKET_get_net_8(&pkt, &arg_opaque)
                || !PACKET_get_net_8(&pkt, &arg_seq_num))
                continue; /* just stop */

            ossl_quic_srtm_remove(srtm, (void *)(uintptr_t)arg_opaque,
                                  arg_seq_num);
            ossl_quic_srtm_check(srtm);
            break;

        case CMD_CULL:
            if (!PACKET_get_net_8(&pkt, &arg_opaque))
                continue; /* just stop */

            ossl_quic_srtm_cull(srtm, (void *)(uintptr_t)arg_opaque);
            ossl_quic_srtm_check(srtm);
            break;

        case CMD_LOOKUP:
            if (!PACKET_copy_bytes(&pkt, arg_token.token,
                                   sizeof(arg_token.token))
                || !PACKET_get_net_8(&pkt, &arg_idx))
                continue; /* just stop */

            ossl_quic_srtm_lookup(srtm, &arg_token, (size_t)arg_idx,
                                  NULL, NULL);
            ossl_quic_srtm_check(srtm);
            break;

        default:
            /* Other bytes are treated as no-ops */
            continue;
        }
    }

    rc = 0;
err:
    ossl_quic_srtm_free(srtm);
    return rc;
}

void FuzzerCleanup(void)
{
    FuzzerClearRand();
}
The diff you're trying to view is too large. Only the first 1000 changed files have been loaded.
Showing with 0 additions and 0 deletions (0 / 0 diffs computed)
swh spinner

Computing file changes ...

ENEA — Copyright (C), ENEA. License: GNU AGPLv3+.
Legal notes  ::  JavaScript license information ::  Web API

back to top