Coverage Report

Created: 2025-11-16 07:00

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/libssh/tests/fuzz/ssh_bind_config_fuzzer.c
Line
Count
Source
1
/*
2
 * Copyright 2021 Jakub Jelen <jjelen@redhat.com>
3
 *
4
 * Licensed under the Apache License, Version 2.0 (the "License");
5
 * you may not use this file except in compliance with the License.
6
 * You may obtain a copy of the License at
7
 *
8
 *      http://www.apache.org/licenses/LICENSE-2.0
9
 *
10
 * Unless required by applicable law or agreed to in writing, software
11
 * distributed under the License is distributed on an "AS IS" BASIS,
12
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
 * See the License for the specific language governing permissions and
14
 * limitations under the License.
15
 */
16
17
#include <assert.h>
18
#include <stdio.h>
19
#include <stdlib.h>
20
#include <string.h>
21
22
#define LIBSSH_STATIC 1
23
#include "libssh/libssh.h"
24
#include "libssh/server.h"
25
#include "libssh/bind_config.h"
26
27
#include "nallocinc.c"
28
29
static void _fuzz_finalize(void)
30
4
{
31
4
    ssh_finalize();
32
4
}
33
34
int LLVMFuzzerInitialize(int *argc, char ***argv)
35
32
{
36
32
    (void)argc;
37
38
32
    nalloc_init(*argv[0]);
39
40
32
    ssh_init();
41
42
32
    atexit(_fuzz_finalize);
43
44
32
    return 0;
45
32
}
46
47
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
48
3.03k
{
49
3.03k
    ssh_bind bind = NULL;
50
3.03k
    char *input = NULL;
51
52
3.03k
    input = (char *)malloc(size + 1);
53
3.03k
    if (!input) {
54
0
        return 1;
55
0
    }
56
3.03k
    strncpy(input, (const char *)data, size);
57
3.03k
    input[size] = '\0';
58
59
3.03k
    assert(nalloc_start(data, size) > 0);
60
61
3.03k
    bind = ssh_bind_new();
62
3.03k
    if (bind == NULL) {
63
213
        goto out;
64
213
    }
65
66
2.82k
    ssh_bind_config_parse_string(bind, input);
67
68
2.82k
    ssh_bind_free(bind);
69
70
3.03k
out:
71
3.03k
    free(input);
72
73
3.03k
    nalloc_end();
74
3.03k
    return 0;
75
2.82k
}