Coverage Report

Created: 2026-02-26 06:25

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/libssh/tests/fuzz/ssh_bind_config_fuzzer.c
Line
Count
Source
1
/*
2
 * Copyright 2021 Jakub Jelen <jjelen@redhat.com>
3
 *
4
 * Licensed under the Apache License, Version 2.0 (the "License");
5
 * you may not use this file except in compliance with the License.
6
 * You may obtain a copy of the License at
7
 *
8
 *      http://www.apache.org/licenses/LICENSE-2.0
9
 *
10
 * Unless required by applicable law or agreed to in writing, software
11
 * distributed under the License is distributed on an "AS IS" BASIS,
12
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
 * See the License for the specific language governing permissions and
14
 * limitations under the License.
15
 */
16
17
#include <assert.h>
18
#include <stdio.h>
19
#include <stdlib.h>
20
#include <string.h>
21
22
#define LIBSSH_STATIC 1
23
#include "libssh/libssh.h"
24
#include "libssh/server.h"
25
#include "libssh/bind_config.h"
26
27
#include "nallocinc.c"
28
29
static void _fuzz_finalize(void)
30
4
{
31
4
    ssh_finalize();
32
4
}
33
34
int LLVMFuzzerInitialize(int *argc, char ***argv)
35
36
{
36
36
    (void)argc;
37
38
36
    nalloc_init(*argv[0]);
39
40
36
    ssh_init();
41
42
36
    atexit(_fuzz_finalize);
43
44
36
    return 0;
45
36
}
46
47
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
48
3.33k
{
49
3.33k
    ssh_bind bind = NULL;
50
3.33k
    char *input = NULL;
51
52
3.33k
    input = (char *)malloc(size + 1);
53
3.33k
    if (!input) {
54
0
        return 1;
55
0
    }
56
3.33k
    strncpy(input, (const char *)data, size);
57
3.33k
    input[size] = '\0';
58
59
3.33k
    assert(nalloc_start(data, size) > 0);
60
61
3.33k
    bind = ssh_bind_new();
62
3.33k
    if (bind == NULL) {
63
469
        goto out;
64
469
    }
65
66
2.86k
    ssh_bind_config_parse_string(bind, input);
67
68
2.86k
    ssh_bind_free(bind);
69
70
3.33k
out:
71
3.33k
    free(input);
72
73
3.33k
    nalloc_end();
74
3.33k
    return 0;
75
2.86k
}