talksik/uWebSockets
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fuzz WebSockets in chunks

Browse Source
This commit is contained in:
Alex Hultman
2019-04-03 03:51:15 +02:00
parent 5dd1932f5f
commit 41ed5e3990
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fuzzing/WebSocket.cpp
+7 -7
View File
@@ -2,12 +2,11 @@
#define WIN32_EXPORT #define WIN32_EXPORT
#include "helpers.h"
/* We test the websocket parser */ /* We test the websocket parser */
#include "../src/WebSocketProtocol.h" #include "../src/WebSocketProtocol.h"
/* We use this to pad the fuzz */
char *padded = new char[1024 * 500];
struct Impl { struct Impl {
static bool refusePayloadLength(uint64_t length, uWS::WebSocketState<true> *wState, void *s) { static bool refusePayloadLength(uint64_t length, uWS::WebSocketState<true> *wState, void *s) {
@@ -47,12 +46,13 @@ struct Impl {
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
/* Pad the fuzz */ /* Create the parser state */
uWS::WebSocketState<true> state; uWS::WebSocketState<true> state;
memcpy(padded + 32, data, size);
/* Parse it */ makeChunked(makePadded(data, size), size, [&state](const uint8_t *data, size_t size) {
uWS::WebSocketProtocol<true, Impl>::consume((char *)padded + 32, size, &state, nullptr); /* Parse it */
uWS::WebSocketProtocol<true, Impl>::consume((char *) data, size, &state, nullptr);
});
return 0; return 0;
} }