You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
67 lines
2.0 KiB
67 lines
2.0 KiB
2 years ago
|
From 86cf4118a04afbc67d0231f8b53cf3629258032a Mon Sep 17 00:00:00 2001
|
||
|
|
From: Evgeny Vereshchagin <evvers@ya.ru>
|
||
|
|
Date: Mon, 3 Sep 2018 06:18:26 +0300
|
||
|
|
Subject: [PATCH] tests: add a rudimentary fuzzer for
|
||
|
|
server_process_syslog_message (#9979)
|
||
|
|
|
||
|
|
(cherry picked from commit a70f343cacf03ac51cdefb0d2e7651b04fd2e23a)
|
||
|
|
|
||
|
|
Resolves: #1696224
|
||
|
|
---
|
||
|
|
src/fuzz/fuzz-journald-syslog.c | 29 +++++++++++++++++++++++++++++
|
||
|
|
src/fuzz/meson.build | 5 +++++
|
||
|
|
2 files changed, 34 insertions(+)
|
||
|
|
create mode 100644 src/fuzz/fuzz-journald-syslog.c
|
||
|
|
|
||
|
|
diff --git a/src/fuzz/fuzz-journald-syslog.c b/src/fuzz/fuzz-journald-syslog.c
|
||
|
|
new file mode 100644
|
||
|
|
index 0000000000..7730f60875
|
||
|
|
--- /dev/null
|
||
|
|
+++ b/src/fuzz/fuzz-journald-syslog.c
|
||
|
|
@@ -0,0 +1,29 @@
|
||
|
|
+/* SPDX-License-Identifier: LGPL-2.1+ */
|
||
|
|
+
|
||
|
|
+#include "alloc-util.h"
|
||
|
|
+#include "fuzz.h"
|
||
|
|
+#include "journald-server.h"
|
||
|
|
+#include "journald-syslog.h"
|
||
|
|
+#include "sd-event.h"
|
||
|
|
+
|
||
|
|
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
|
||
|
|
+ Server s = {};
|
||
|
|
+ char *label = NULL;
|
||
|
|
+ size_t label_len = 0;
|
||
|
|
+ struct ucred *ucred = NULL;
|
||
|
|
+ struct timeval *tv = NULL;
|
||
|
|
+
|
||
|
|
+ if (size == 0)
|
||
|
|
+ return 0;
|
||
|
|
+
|
||
|
|
+ assert_se(sd_event_default(&s.event) >= 0);
|
||
|
|
+ s.syslog_fd = s.native_fd = s.stdout_fd = s.dev_kmsg_fd = s.audit_fd = s.hostname_fd = s.notify_fd = -1;
|
||
|
|
+ s.buffer = memdup_suffix0(data, size);
|
||
|
|
+ assert_se(s.buffer);
|
||
|
|
+ s.buffer_size = size + 1;
|
||
|
|
+ s.storage = STORAGE_NONE;
|
||
|
|
+ server_process_syslog_message(&s, s.buffer, size, ucred, tv, label, label_len);
|
||
|
|
+ server_done(&s);
|
||
|
|
+
|
||
|
|
+ return 0;
|
||
|
|
+}
|
||
|
|
diff --git a/src/fuzz/meson.build b/src/fuzz/meson.build
|
||
|
|
index ad44778889..28770b68b8 100644
|
||
|
|
--- a/src/fuzz/meson.build
|
||
|
|
+++ b/src/fuzz/meson.build
|
||
|
|
@@ -19,6 +19,11 @@ fuzzers += [
|
||
|
|
libshared],
|
||
|
|
[libmount]],
|
||
|
|
|
||
|
|
+ [['src/fuzz/fuzz-journald-syslog.c'],
|
||
|
|
+ [libjournal_core,
|
||
|
|
+ libshared],
|
||
|
|
+ [libselinux]],
|
||
|
|
+
|
||
|
|
[['src/fuzz/fuzz-journal-remote.c'],
|
||
|
|
[libsystemd_journal_remote,
|
||
|
|
libshared],
|