talksik/uWebSockets
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Simplify PerMessageDeflate fuzzing regions

Browse Source
This commit is contained in:
Alex Hultman
2020-08-14 16:34:14 +02:00
parent 301b7ffe45
commit 959ac9ef80
1 changed files with 43 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fuzzing/PerMessageDeflate.cpp
+43 -40
View File
@@ -4,6 +4,7 @@
#include <cstdio>
#include <string>
#include <bitset>
/* We test the permessage deflate module */
#include "../src/PerMessageDeflate.h"
@@ -13,48 +14,50 @@
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
/* First byte determines what compressor to use */
if (size < 1) {
return 0;
if (size >= 1) {
int compressors[] = {
uWS::DEDICATED_COMPRESSOR_3KB,
uWS::DEDICATED_COMPRESSOR_4KB,
uWS::DEDICATED_COMPRESSOR_8KB,
uWS::DEDICATED_COMPRESSOR_16KB,
uWS::DEDICATED_COMPRESSOR_32KB,
uWS::DEDICATED_COMPRESSOR_64KB,
uWS::DEDICATED_COMPRESSOR_128KB,
uWS::DEDICATED_COMPRESSOR_256KB
};
auto compressor = compressors[data[0] % 8];
data++;
size--;
/* Bits 0 - 256 are okay */
std::bitset<257> b;
/* If we could specify LARGE_BUFFER_SIZE small here we could force it to inflate in chunks,
* triggering more line coverage. Currently it is set to 16kb which is always too much */
struct StaticData {
uWS::DeflationStream deflationStream;
uWS::ZlibContext zlibContext;
uWS::InflationStream inflationStream;
} staticData = {compressor};
/* Why is this padded? */
makeChunked(makePadded(data, size), size, [&staticData, &b](const uint8_t *data, size_t size) {
auto [inflation, valid] = staticData.inflationStream.inflate(&staticData.zlibContext, std::string_view((char *) data, size), 256);
/* Trigger ASAN flaws if length is more than 256 */
b.set(inflation.length());
});
makeChunked(makePadded(data, size), size, [&staticData](const uint8_t *data, size_t size) {
/* Always reset */
staticData.deflationStream.deflate(&staticData.zlibContext, std::string_view((char *) data, size), true);
});
}
int compressors[] = {
uWS::DEDICATED_COMPRESSOR_3KB,
uWS::DEDICATED_COMPRESSOR_4KB,
uWS::DEDICATED_COMPRESSOR_8KB,
uWS::DEDICATED_COMPRESSOR_16KB,
uWS::DEDICATED_COMPRESSOR_32KB,
uWS::DEDICATED_COMPRESSOR_64KB,
uWS::DEDICATED_COMPRESSOR_128KB,
uWS::DEDICATED_COMPRESSOR_256KB
};
auto compressor = compressors[data[0] % 8];
data++;
size--;
/* If we could specify LARGE_BUFFER_SIZE small here we could force it to inflate in chunks,
* triggering more line coverage. Currently it is set to 16kb which is always too much */
struct StaticData {
uWS::DeflationStream deflationStream;
uWS::ZlibContext zlibContext;
uWS::InflationStream inflationStream;
} staticData = {compressor};
/* Why is this padded? */
makeChunked(makePadded(data, size), size, [&staticData](const uint8_t *data, size_t size) {
auto [inflation, valid] = staticData.inflationStream.inflate(&staticData.zlibContext, std::string_view((char *) data, size), 256);
if (inflation.length() > 256) {
/* Cause ASAN to freak out */
delete (int *) (void *) 1;
}
});
makeChunked(makePadded(data, size), size, [&staticData](const uint8_t *data, size_t size) {
/* Always reset */
staticData.deflationStream.deflate(&staticData.zlibContext, std::string_view((char *) data, size), true);
});
return 0;
}