talksik/uWebSockets
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fuzz with check for message length passed

Browse Source
This commit is contained in:
Alex Hultman
2019-12-31 13:13:42 +01:00
parent 54dd866a84
commit 736e50bdc8
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fuzzing/MockedEchoServer.cpp
+8 -1
View File
@@ -19,7 +19,8 @@ extern "C" int LLVMFuzzerInitialize(int *argc, char ***argv) {
app = new uWS::TemplatedApp<false>(uWS::App().ws<PerSocketData>("/*", { app = new uWS::TemplatedApp<false>(uWS::App().ws<PerSocketData>("/*", {
/* Settings */ /* Settings */
.compression = uWS::SHARED_COMPRESSOR, .compression = uWS::SHARED_COMPRESSOR,
.maxPayloadLength = 16 * 1024, /* We want this to be low so that we can hit it, yet bigger than 256 */
.maxPayloadLength = 300,
.idleTimeout = 10, .idleTimeout = 10,
/* Handlers */ /* Handlers */
.open = [](auto *ws, auto *req) { .open = [](auto *ws, auto *req) {
@@ -30,6 +31,12 @@ extern "C" int LLVMFuzzerInitialize(int *argc, char ***argv) {
} }
}, },
.message = [](auto *ws, std::string_view message, uWS::OpCode opCode) { .message = [](auto *ws, std::string_view message, uWS::OpCode opCode) {
if (message.length() > 300) {
/* Inform the sanitizer of the fault */
fprintf(stderr, "Too long message passed\n");
free((void *) -1);
}
if (message.length() && message[0] == 'C') { if (message.length() && message[0] == 'C') {
ws->close(); ws->close();
} else if (message.length() && message[0] == 'E') { } else if (message.length() && message[0] == 'E') {