Coverage Report

Created: 2026-10-17 06:54

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/net-snmp/testing/fuzzing/snmp_parse_args_fuzzer.c
Line
Count
Source
1
 /*
2
  * Copyright (c) 2025, Net-snmp authors
3
  * All rights reserved.
4
  *
5
  * Redistribution and use in source and binary forms, with or without
6
  * modification, are permitted provided that the following conditions are met:
7
  *
8
  * * Redistributions of source code must retain the above copyright notice, this
9
  *   list of conditions and the following disclaimer.
10
  *
11
  * * Redistributions in binary form must reproduce the above copyright notice,
12
  *   this list of conditions and the following disclaimer in the documentation
13
  *   and/or other materials provided with the distribution.
14
  *
15
  * * Neither the name of the copyright holder nor the names of its
16
  *   contributors may be used to endorse or promote products derived from
17
  *   this software without specific prior written permission.
18
  *
19
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
20
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
22
  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
23
  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24
  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
25
  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
26
  * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
27
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
28
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
29
  */
30
#include <net-snmp/net-snmp-config.h>
31
#include <net-snmp/net-snmp-includes.h>
32
#include <net-snmp/library/snmp_parse_args.h>
33
#include <libgen.h>
34
#include <limits.h>
35
#include "ada_fuzz_header.h"
36
37
int
38
LLVMFuzzerInitialize(int *argc, char ***argv)
39
36
{
40
36
    char path[PATH_MAX];
41
36
    char mibdirs[PATH_MAX];
42
36
    char *dir;
43
44
36
    if (getenv("NETSNMP_DEBUGGING") != NULL) {
45
0
        snmp_enable_stderrlog();
46
0
        snmp_set_do_debugging(1);
47
0
        debug_register_tokens("");
48
0
    }
49
36
    strlcpy(path, (*argv)[0], sizeof(path));
50
36
    dir = dirname(path);
51
36
    snprintf(mibdirs, sizeof(mibdirs), "%s/../../mibs", dir);
52
36
    netsnmp_ds_set_string(NETSNMP_DS_LIBRARY_ID, NETSNMP_DS_LIB_MIBDIRS,
53
36
                          mibdirs);
54
36
    return 0;
55
36
}
56
57
static void
58
dummy_opt_proc(int argc, char *const *argv, int opt)
59
0
{
60
0
}
61
62
int
63
LLVMFuzzerTestOneInput(const uint8_t * data, size_t size)
64
5.06k
{
65
5.06k
    af_gb_init();
66
67
5.06k
    int argc = (af_get_short(&data, &size) % 99) + 1;
68
5.06k
    char **argv = malloc(argc * sizeof(*argv));
69
42.8k
    for (int i = 0; i < argc; i++) {
70
37.7k
        argv[i] = af_gb_get_null_terminated(&data, &size);
71
37.7k
        if (!argv[i])
72
33
            goto free_argv;
73
37.7k
    }
74
75
#if 0
76
    snmp_set_do_debugging(1);
77
    debug_register_tokens("snmp_parse_args");
78
#endif
79
80
5.02k
    netsnmp_session *ss = SNMP_MALLOC_TYPEDEF(netsnmp_session);
81
82
5.02k
    snmp_parse_args(argc, argv, ss, "", dummy_opt_proc);
83
84
5.02k
    snmp_close(ss);
85
5.02k
    netsnmp_cleanup_session(ss);
86
5.02k
    free(ss);
87
88
5.06k
free_argv:
89
5.06k
    free(argv);
90
91
5.06k
    af_gb_cleanup();
92
93
5.06k
    return 0;
94
5.02k
}