/src/net-snmp/testing/fuzzing/snmp_parse_oid_fuzzer.c
| Line | Count | Source (jump to first uncovered line) | 
| 1 |  |  /* | 
| 2 |  |   * Copyright (c) 2021, Net-snmp authors | 
| 3 |  |   * All rights reserved. | 
| 4 |  |   * | 
| 5 |  |   * Redistribution and use in source and binary forms, with or without | 
| 6 |  |   * modification, are permitted provided that the following conditions are met: | 
| 7 |  |   * | 
| 8 |  |   * * Redistributions of source code must retain the above copyright notice, this | 
| 9 |  |   *   list of conditions and the following disclaimer. | 
| 10 |  |   * | 
| 11 |  |   * * Redistributions in binary form must reproduce the above copyright notice, | 
| 12 |  |   *   this list of conditions and the following disclaimer in the documentation | 
| 13 |  |   *   and/or other materials provided with the distribution. | 
| 14 |  |   * | 
| 15 |  |   * * Neither the name of the copyright holder nor the names of its | 
| 16 |  |   *   contributors may be used to endorse or promote products derived from | 
| 17 |  |   *   this software without specific prior written permission. | 
| 18 |  |   * | 
| 19 |  |   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" | 
| 20 |  |   * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | 
| 21 |  |   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE | 
| 22 |  |   * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE | 
| 23 |  |   * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | 
| 24 |  |   * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR | 
| 25 |  |   * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER | 
| 26 |  |   * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, | 
| 27 |  |   * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | 
| 28 |  |   * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
| 29 |  | */ | 
| 30 |  | #include <net-snmp/net-snmp-config.h> | 
| 31 |  | #include <net-snmp/net-snmp-includes.h> | 
| 32 |  | #include <stddef.h> | 
| 33 |  | #include <stdint.h> | 
| 34 |  | #include <stdlib.h> | 
| 35 |  |  | 
| 36 | 28 | int LLVMFuzzerInitialize(int *argc, char ***argv) { | 
| 37 | 28 |     if (getenv("NETSNMP_DEBUGGING") != NULL) { | 
| 38 |  |         /* | 
| 39 |  |          * Turn on all debugging, to help understand what | 
| 40 |  |          * bits of the parser are running. | 
| 41 |  |          */ | 
| 42 | 0 |         snmp_enable_stderrlog(); | 
| 43 | 0 |         snmp_set_do_debugging(1); | 
| 44 | 0 |         debug_register_tokens(""); | 
| 45 | 0 |     } | 
| 46 | 28 |     return 0; | 
| 47 | 28 | } | 
| 48 |  |  | 
| 49 | 0 | int SecmodInMsg_CB(struct snmp_secmod_incoming_params *sp1) { | 
| 50 | 0 |     return SNMPERR_SUCCESS; | 
| 51 | 0 | } | 
| 52 |  |  | 
| 53 | 567 | int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { | 
| 54 | 567 |     oid *root = malloc(MAX_OID_LEN * sizeof(oid)); | 
| 55 | 567 |     size_t rootlen = MAX_OID_LEN; | 
| 56 | 567 |     char *input; | 
| 57 |  |  | 
| 58 | 567 |     input = strndup((const char *)data, size); | 
| 59 | 567 |     if (root && input) | 
| 60 | 567 |         snmp_parse_oid((const char *)input, root, &rootlen); | 
| 61 | 567 |     free(root); | 
| 62 | 567 |     free(input); | 
| 63 | 567 |     return 0;  | 
| 64 | 567 | } |