Tobias Brunner
2ed929d9f6
The bus.h header file redirects DBG* macros to the bus but that won't be available unless libcharon is initialized.
61 lines
1.5 KiB
C
61 lines
1.5 KiB
C
/*
|
|
* Copyright (C) 2026 Arthur SC Chan
|
|
*
|
|
* Copyright (C) secunet Security Networks AG
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
#include <daemon.h>
|
|
#include <library.h>
|
|
#include <encoding/message.h>
|
|
|
|
int LLVMFuzzerInitialize(int *argc, char ***argv)
|
|
{
|
|
dbg_default_set_level(-1);
|
|
library_init(NULL, "fuzz_ike");
|
|
libcharon_init();
|
|
return 0;
|
|
}
|
|
|
|
int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len)
|
|
{
|
|
message_t *message;
|
|
packet_t *packet;
|
|
|
|
/* Minimum IKE header size for fuzzing meaningful IKE headers effectively */
|
|
if (len < 28)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
/* Create packet from fuzzer input */
|
|
packet = packet_create_from_data(host_create_from_string("192.0.2.1", 500),
|
|
host_create_from_string("192.0.2.2", 500),
|
|
chunk_clone(chunk_create((u_char*)buf, len)));
|
|
if (!packet)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
/* Fuzz IKE message parsing and processing */
|
|
message = message_create_from_packet(packet);
|
|
if (message)
|
|
{
|
|
if (message->parse_header(message) == SUCCESS)
|
|
{
|
|
message->parse_body(message, NULL);
|
|
}
|
|
message->destroy(message);
|
|
}
|
|
return 0;
|
|
}
|