gr1ffon/quic-go
1
0
Fork 0
forked from quic-go/quic-go
Code Pull Requests Activity

use fuzzing helper functions to generate transport parameter seed corpus

Browse Source
This commit is contained in:
Marten Seemann
2020-08-25 13:16:03 +07:00
parent 5090dd6199
commit a1c4daa212
24 changed files with 48 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
fuzzing/transportparameters/fuzz.go
View File

@@ -4,28 +4,32 @@ import (
"bytes"
"fmt"
"github.com/lucas-clemente/quic-go/fuzzing/internal/helper"
"github.com/lucas-clemente/quic-go/internal/protocol"
"github.com/lucas-clemente/quic-go/internal/wire"
)
// PrefixLen is the number of bytes used for configuration
const PrefixLen = 1
// Fuzz fuzzes the QUIC transport parameters.
//go:generate go run ./cmd/corpus.go
func Fuzz(data []byte) int {
if len(data) <= 1 {
if len(data) <= PrefixLen {
return 0
}
if data[0]%2 == 0 {
return fuzzTransportParametersForSessionTicket(data[1:])
if helper.NthBit(data[0], 0) {
return fuzzTransportParametersForSessionTicket(data[PrefixLen:])
}
return fuzzTransportParameters(data[1:])
return fuzzTransportParameters(data[PrefixLen:], helper.NthBit(data[0], 1))
}
func fuzzTransportParameters(data []byte) int {
perspective := protocol.PerspectiveServer
if data[0]%2 == 1 {
func fuzzTransportParameters(data []byte, isServer bool) int {
perspective := protocol.PerspectiveClient
if isServer {
perspective = protocol.PerspectiveServer
}
data = data[1:]
tp := &wire.TransportParameters{}
if err := tp.Unmarshal(data, perspective); err != nil {