// Copyright (C) 2025 Ada Logcis Ltd.

//

// This Source Code Form is subject to the terms of the Mozilla Public

// License, v. 2.0. If a copy of the MPL was not distributed with this

// file, You can obtain one at http://mozilla.org/MPL/2.0/.

////////////////////////////////////////////////////////////////////////////////

#include <config.h>

#include <fuzzer/FuzzedDataProvider.h>

#include <dhcp/dhcp6.h>

#include <dhcp/pkt6.h>

#include <dhcp/libdhcp++.h>

#include <dhcp/option.h>

#include <dhcp/user_chk/user.h>

#include <dhcp/user_chk/user_data_source.h>

#include <dhcp/user_chk/user_file.h>

#include <dhcp/user_chk/user_registry.h>

#include <dhcp6/ctrl_dhcp6_srv.h>

#include <dhcpsrv/callout_handle_store.h>

#include <dhcpsrv/cfgmgr.h>

#include <dhcpsrv/lease_mgr_factory.h>

#include <log/logger_support.h>

#include <util/filesystem.h>

#include <cstddef>

#include <cstdint>

#include <vector>

#include <list>

#include <memory>

#include <iostream>

#include <filesystem>

#include <fstream>

#include <string>

#include <cstdio>

#include <cstdlib>

#include "helper_func.h"

using namespace isc::dhcp;

using namespace isc::hooks;

using namespace isc::util;

using namespace user_chk;

extern "C" UserRegistryPtr user_registry;

extern "C" int pkt6_receive(CalloutHandle& handle);

extern "C" int subnet6_select(CalloutHandle& handle);

namespace isc {

    namespace dhcp {

        class MyDhcpv6Srv : public ControlledDhcpv6Srv {

            public:

                void fuzz_classifyPacket(const Pkt6Ptr& pkt) {

                    classifyPacket(pkt);

                }

        };

    }

}

extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {

    if (size < 236) {

        // package size requires at least 236 bytes

        return 0;

    }

    FuzzedDataProvider fdp(data, size);

    // Disable validatePath checking to allow writing configuration file to /tmp

    isc::util::file::PathChecker::enableEnforcement(false);

    // Force DUID file to /tmp

    setenv("KEA_DHCP_DATA_DIR", "/tmp", 1);

    // Initialise logging

    setenv("KEA_LOGGER_DESTINATION", "/dev/null", 0);

    setenv("KEA_LOCKFILE_DIR", "/tmp", 0);

    setenv("KEA_PIDFILE_DIR", "/tmp", 0);

    setenv("KEA_LFC_EXECUTABLE", "/bin/true", 0);

    try {

        isc::log::initLogger("fuzzer");

        isc::process::Daemon::loggerInit("fuzzer", false);

        isc::process::Daemon::setDefaultLoggerName("fuzzer");

    } catch (...) {

        // Early exit if logging initialisation failed

        return 0;

    }

    // Creating temp config file

    std::string path = fuzz::writeTempConfig(false);

    if (path.empty()) {

        // Early exit if configuration file creation failed

        fuzz::deleteTempFile(path);

        return 0;

    }

    // Creating temp lease file

    std::string lease_path = fuzz::writeTempLease(false);

    // Creating temp user file

    std::string user_path = fuzz::writeTempUserFile();

    // Creating user registry

    try {

        user_registry.reset(new UserRegistry());

        UserDataSourcePtr user_file(new UserFile(user_path));

        user_registry->setSource(user_file);

        user_registry->refresh();

    } catch (std::exception& e) {

        // Early exit if user registry failed to create.

        return 0;

    }

    try {

        for (int i = 0; i < fdp.ConsumeIntegralInRange<int>(1, 5); i++) {

            if (fdp.ConsumeBool()) {

                std::vector<uint8_t> mac = fdp.ConsumeBytes<uint8_t>(6);

                UserPtr user = UserPtr(new User(UserId::HW_ADDRESS, mac));

                user_registry->addUser(user);

            } else {

                const size_t len = fdp.ConsumeIntegralInRange<size_t>(2, 64);

                std::vector<uint8_t> duid = fdp.ConsumeBytes<uint8_t>(len);

                UserPtr user = UserPtr(new User(UserId::DUID, duid));

                user_registry->addUser(user);

            }

        }

    } catch (...) {

        // Slient exceptions

    }

    Pkt6Ptr pkt;

    std::unique_ptr<MyDhcpv6Srv> srv;

    // Package parsing

    try {

        pkt = Pkt6Ptr(new Pkt6(data, size));

        pkt->unpack();

    } catch (...) {

        // Early exit if package parsing failed.

        return 0;

    }

    // Configure random value in packet

    uint8_t typeChoice = fdp.ConsumeIntegralInRange<uint8_t>(0, 37);

    pkt->setType(static_cast<DHCPv6MessageType>(typeChoice));

    // Server initialisation

    try {

        srv.reset(new MyDhcpv6Srv());

        srv->init(path);

    } catch (...) {

        // Early exit if server initialisation failed.

        return 0;

    }

    if (!srv) {

        // Early exit if server initialisation failed.

        return 0;

    }

    CalloutHandlePtr handle = nullptr;

    // Fuzz pkt6_receive

    try {

        handle = getCalloutHandle(pkt);

        std::vector<uint8_t> duid = fdp.ConsumeBytes<uint8_t>(fdp.ConsumeIntegralInRange<int>(2, 128));

        OptionPtr option = OptionPtr(new Option(Option::V4, 1, duid));

        pkt->addOption(option);

        handle->setArgument("query6", pkt);

        pkt6_receive(*handle);

    } catch (const isc::Exception& e) {

        // Slient exceptions

    } catch (const boost::exception& e) {

        // Slient exceptions

    }

    // Clean handle to avoid mem leak

    if (handle) {

        handle->deleteAllArguments();

    }

    // Call classifyPacket for packet checking

    try {

        srv->fuzz_classifyPacket(pkt);

    } catch (const isc::Exception& e) {

        // Slient exceptions

    } catch (const boost::exception& e) {

        // Slient exceptions

    }

    // Prepare client context

    AllocEngine::ClientContext6 ctx;

    // Call earlyGHRLookup

    try {

        srv->earlyGHRLookup(pkt, ctx);

    } catch (const isc::Exception& e) {

        // Slient exceptions

    } catch (const boost::exception& e) {

        // Slient exceptions

    }

    // Fuzz subnet6_select

    try {

        handle = getCalloutHandle(pkt);

        Pkt6Ptr rsp;

        CfgMgr& cfgmgr = CfgMgr::instance();

        handle = getCalloutHandle(pkt);

        handle->setArgument("query6", pkt);

        handle->setArgument("subnet6", ctx.subnet_);

        handle->setArgument("subnet6collection",

                            cfgmgr.getCurrentCfg()->getCfgSubnets6()->getAll());

        subnet6_select(*handle);

    } catch (const isc::Exception& e) {

        // Slient exceptions

    } catch (const boost::exception& e) {

        // Slient exceptions

    }

    // Clean handle to avoid mem leak

    if (handle) {

        handle->deleteAllArguments();

    }

    srv.reset();

    // Remove temp files

    fuzz::deleteTempFile(path);

    fuzz::deleteTempFile(lease_path);

    fuzz::deleteTempFile(user_path);

    return 0;

}