d69d8f904c
We want to be in the same global state each time we come in FuzzerTestOneInput(). There are various reasons why we might not be that include: - Initialization that happens on first use. This is mostly the RUN_ONCE() things, or loading of error strings. - Results that get cached. For instance a stack that is sorted, RSA blinding that has been set up, ... So I try to trigger as much as possible in FuzzerInitialize(), and for things I didn't find out how to trigger this it needs to happen in FuzzerTestOneInput(). Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #2023
51 lines
1.2 KiB
C
51 lines
1.2 KiB
C
/*
|
|
* Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the OpenSSL licenses, (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
* https://www.openssl.org/source/license.html
|
|
* or in the file LICENSE in the source distribution.
|
|
*/
|
|
|
|
/*
|
|
* Fuzz the SCT parser.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <openssl/ct.h>
|
|
#include <openssl/err.h>
|
|
#include "fuzzer.h"
|
|
|
|
int FuzzerInitialize(int *argc, char ***argv)
|
|
{
|
|
OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL);
|
|
CRYPTO_free_ex_index(0, -1);
|
|
ERR_get_state();
|
|
return 1;
|
|
}
|
|
|
|
int FuzzerTestOneInput(const uint8_t *buf, size_t len)
|
|
{
|
|
const uint8_t **pp = &buf;
|
|
unsigned char *der = NULL;
|
|
STACK_OF(SCT) *scts = d2i_SCT_LIST(NULL, pp, len);
|
|
if (scts != NULL) {
|
|
BIO *bio = BIO_new(BIO_s_null());
|
|
SCT_LIST_print(scts, bio, 4, "\n", NULL);
|
|
BIO_free(bio);
|
|
|
|
if (i2d_SCT_LIST(scts, &der)) {
|
|
/* Silence unused result warning */
|
|
}
|
|
OPENSSL_free(der);
|
|
|
|
SCT_LIST_free(scts);
|
|
}
|
|
ERR_clear_error();
|
|
return 0;
|
|
}
|
|
|
|
void FuzzerCleanup(void)
|
|
{
|
|
}
|