toxcore/DHT_fuzz_test.cc

Rama master · réplica de lectura del repositorio original.

#include "DHT.h"

#include <array>
#include <cassert>
#include <cstddef>
#include <cstdlib>
#include <vector>

#include "../testing/support/public/fuzz_data.hh"
#include "../testing/support/public/simulated_environment.hh"
#include "DHT_test_util.hh"

namespace {

using tox::test::Fuzz_Data;
using tox::test::SimulatedEnvironment;

void TestHandleRequest(Fuzz_Data &input)
{
    SimulatedEnvironment env{12345};
    auto c_mem = env.fake_memory().c_memory();

    CONSUME_OR_RETURN(const std::uint8_t *self_public_key, input, CRYPTO_PUBLIC_KEY_SIZE);
    CONSUME_OR_RETURN(const std::uint8_t *self_secret_key, input, CRYPTO_SECRET_KEY_SIZE);

    std::uint8_t public_key[CRYPTO_PUBLIC_KEY_SIZE];
    std::uint8_t request[MAX_CRYPTO_REQUEST_SIZE];
    std::uint8_t request_id;
    handle_request(&c_mem, self_public_key, self_secret_key, public_key, request, &request_id,
        input.data(), input.size());
}

void TestUnpackNodes(Fuzz_Data &input)
{
    CONSUME1_OR_RETURN(const bool, tcp_enabled, input);

    const std::uint16_t node_count = 5;
    std::array<Node_format, node_count> nodes;
    std::uint16_t processed_data_len;
    const int packed_count = unpack_nodes(
        nodes.data(), nodes.size(), &processed_data_len, input.data(), input.size(), tcp_enabled);
    if (packed_count > 0) {
        SimulatedEnvironment env{12345};
        auto c_mem = env.fake_memory().c_memory();
        Logger *logger = logger_new(&c_mem);
        std::vector<std::uint8_t> packed(packed_count * PACKED_NODE_SIZE_IP6);
        const int packed_size
            = pack_nodes(logger, packed.data(), packed.size(), nodes.data(), packed_count);
        LOGGER_ASSERT(logger, packed_size == processed_data_len,
            "packed size (%d) != unpacked size (%d)", packed_size, processed_data_len);
        logger_kill(logger);

        // Check that packed nodes can be unpacked again and result in the
        // original unpacked nodes.
        std::array<Node_format, node_count> nodes2;
        std::uint16_t processed_data_len2;
        const int packed_count2 = unpack_nodes(nodes2.data(), nodes2.size(), &processed_data_len2,
            packed.data(), packed.size(), tcp_enabled);
        (void)packed_count2;
#if 0
        assert(processed_data_len2 == processed_data_len);
        assert(packed_count2 == packed_count);
#endif
        assert(std::vector<Node_format>(nodes.begin(), nodes.begin() + packed_count)
            == std::vector<Node_format>(nodes2.begin(), nodes2.begin() + packed_count));
    }
}

}  // namespace

extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t *data, std::size_t size);
extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t *data, std::size_t size)
{
    tox::test::fuzz_select_target<TestHandleRequest, TestUnpackNodes>(data, size);
    return 0;
}