mirror of
https://gitlab.isc.org/isc-projects/kea
synced 2025-08-22 01:49:48 +00:00
130 lines
3.2 KiB
C++
130 lines
3.2 KiB
C++
// Copyright (C) 2024-2025 Internet Systems Consortium, Inc. ("ISC")
|
|
//
|
|
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
#include <config.h>
|
|
|
|
#include <fuzz.h>
|
|
|
|
#include <cc/command_interpreter.h>
|
|
#include <cc/user_context.h>
|
|
#include <dhcp4/ctrl_dhcp4_srv.h>
|
|
#include <dhcp4/json_config_parser.h>
|
|
#include <dhcp4/parser_context.h>
|
|
#include <dhcpsrv/packet_fuzzer.h>
|
|
#include <util/encode/encode.h>
|
|
|
|
#include <cassert>
|
|
#include <cstdlib>
|
|
#include <util/filesystem.h>
|
|
#include <vector>
|
|
|
|
using namespace isc;
|
|
using namespace isc::config;
|
|
using namespace isc::util;
|
|
using namespace std;
|
|
|
|
namespace {
|
|
|
|
static string const KEA_DHCP4_CONF(KEA_FUZZ_DIR + "/kea-dhcp4.conf");
|
|
static string KEA_DHCP4_FUZZING_INTERFACE;
|
|
static string KEA_DHCP4_FUZZING_ADDRESS;
|
|
|
|
} // namespace
|
|
|
|
extern "C" {
|
|
|
|
int
|
|
LLVMFuzzerInitialize() {
|
|
static bool initialized(DoInitialization());
|
|
assert(initialized);
|
|
|
|
setenv("KEA_DHCP4_FUZZING_ROTATE_PORT", "true", 0);
|
|
|
|
if (if_nametoindex("lo") > 0) {
|
|
KEA_DHCP4_FUZZING_INTERFACE = string("lo");
|
|
} else if (if_nametoindex("lo0") > 0) {
|
|
KEA_DHCP4_FUZZING_INTERFACE = string("lo0");
|
|
}
|
|
|
|
char const* iface(getenv("KEA_DHCP4_FUZZING_INTERFACE"));
|
|
if (iface) {
|
|
KEA_DHCP4_FUZZING_INTERFACE = string(iface);
|
|
}
|
|
|
|
char const* address(getenv("KEA_DHCP4_FUZZING_ADDRESS"));
|
|
KEA_DHCP4_FUZZING_ADDRESS = string(address ? address : "127.0.0.1");
|
|
|
|
writeToFile(KEA_DHCP4_CONF, R"(
|
|
{
|
|
"Dhcp4": {
|
|
"interfaces-config": {
|
|
"dhcp-socket-type": "udp",
|
|
"interfaces": [
|
|
")" + KEA_DHCP4_FUZZING_INTERFACE + R"("
|
|
]
|
|
},
|
|
"lease-database": {
|
|
"persist": false,
|
|
"type": "memfile"
|
|
},
|
|
"subnet4": [
|
|
{
|
|
"id": 1,
|
|
"pools": [
|
|
{
|
|
"pool": "10.0.0.0/8"
|
|
}
|
|
],
|
|
"subnet": "10.0.0.0/8"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
)");
|
|
|
|
// Iterate through the interfaces and expect no errors.
|
|
for (IfacePtr const& interface : IfaceMgr::instance().getIfaces()) {
|
|
for (string const& error : interface->getErrors()) {
|
|
cout << error << endl;
|
|
}
|
|
assert(interface->getErrors().empty());
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
LLVMFuzzerTearDown() {
|
|
try {
|
|
remove(KEA_DHCP4_CONF.c_str());
|
|
} catch (...) {
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
LLVMFuzzerTestOneInput(uint8_t const* data, size_t size) {
|
|
vector<uint8_t> byte_stream;
|
|
bool const valid(byteStreamToPacketData(data, size, byte_stream));
|
|
if (!valid) {
|
|
cout << "Invalid input. Skipping..." << endl;
|
|
return 0;
|
|
}
|
|
|
|
ControlledDhcpv4Srv server;
|
|
server.init(KEA_DHCP4_CONF);
|
|
|
|
// Fuzz.
|
|
PacketFuzzer fuzzer(ControlledDhcpv4Srv::getInstance()->getServerPort(),
|
|
KEA_DHCP4_FUZZING_INTERFACE, KEA_DHCP4_FUZZING_ADDRESS);
|
|
fuzzer.transfer(byte_stream.data(), byte_stream.size());
|
|
ControlledDhcpv4Srv::getInstance()->runOne();
|
|
|
|
return 0;
|
|
}
|
|
|
|
} // extern "C"
|