/src/net-snmp/testing/fuzzing/snmp_parse_args_fuzzer.c
Line | Count | Source |
1 | | /* |
2 | | * Copyright (c) 2025, Net-snmp authors |
3 | | * All rights reserved. |
4 | | * |
5 | | * Redistribution and use in source and binary forms, with or without |
6 | | * modification, are permitted provided that the following conditions are met: |
7 | | * |
8 | | * * Redistributions of source code must retain the above copyright notice, this |
9 | | * list of conditions and the following disclaimer. |
10 | | * |
11 | | * * Redistributions in binary form must reproduce the above copyright notice, |
12 | | * this list of conditions and the following disclaimer in the documentation |
13 | | * and/or other materials provided with the distribution. |
14 | | * |
15 | | * * Neither the name of the copyright holder nor the names of its |
16 | | * contributors may be used to endorse or promote products derived from |
17 | | * this software without specific prior written permission. |
18 | | * |
19 | | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" |
20 | | * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
21 | | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
22 | | * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE |
23 | | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
24 | | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR |
25 | | * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER |
26 | | * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
27 | | * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
28 | | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
29 | | */ |
30 | | #include <net-snmp/net-snmp-config.h> |
31 | | #include <net-snmp/net-snmp-includes.h> |
32 | | #include <net-snmp/library/snmp_parse_args.h> |
33 | | #include <libgen.h> |
34 | | #include <limits.h> |
35 | | #include "ada_fuzz_header.h" |
36 | | |
37 | | int |
38 | | LLVMFuzzerInitialize(int *argc, char ***argv) |
39 | 36 | { |
40 | 36 | char path[PATH_MAX]; |
41 | 36 | char mibdirs[PATH_MAX]; |
42 | 36 | char *dir; |
43 | | |
44 | 36 | if (getenv("NETSNMP_DEBUGGING") != NULL) { |
45 | 0 | snmp_enable_stderrlog(); |
46 | 0 | snmp_set_do_debugging(1); |
47 | 0 | debug_register_tokens(""); |
48 | 0 | } |
49 | 36 | strlcpy(path, (*argv)[0], sizeof(path)); |
50 | 36 | dir = dirname(path); |
51 | 36 | snprintf(mibdirs, sizeof(mibdirs), "%s/../../mibs", dir); |
52 | 36 | netsnmp_ds_set_string(NETSNMP_DS_LIBRARY_ID, NETSNMP_DS_LIB_MIBDIRS, |
53 | 36 | mibdirs); |
54 | 36 | return 0; |
55 | 36 | } |
56 | | |
57 | | static void |
58 | | dummy_opt_proc(int argc, char *const *argv, int opt) |
59 | 0 | { |
60 | 0 | } |
61 | | |
62 | | int |
63 | | LLVMFuzzerTestOneInput(const uint8_t * data, size_t size) |
64 | 5.06k | { |
65 | 5.06k | af_gb_init(); |
66 | | |
67 | 5.06k | int argc = (af_get_short(&data, &size) % 99) + 1; |
68 | 5.06k | char **argv = malloc(argc * sizeof(*argv)); |
69 | 42.8k | for (int i = 0; i < argc; i++) { |
70 | 37.7k | argv[i] = af_gb_get_null_terminated(&data, &size); |
71 | 37.7k | if (!argv[i]) |
72 | 33 | goto free_argv; |
73 | 37.7k | } |
74 | | |
75 | | #if 0 |
76 | | snmp_set_do_debugging(1); |
77 | | debug_register_tokens("snmp_parse_args"); |
78 | | #endif |
79 | | |
80 | 5.02k | netsnmp_session *ss = SNMP_MALLOC_TYPEDEF(netsnmp_session); |
81 | | |
82 | 5.02k | snmp_parse_args(argc, argv, ss, "", dummy_opt_proc); |
83 | | |
84 | 5.02k | snmp_close(ss); |
85 | 5.02k | netsnmp_cleanup_session(ss); |
86 | 5.02k | free(ss); |
87 | | |
88 | 5.06k | free_argv: |
89 | 5.06k | free(argv); |
90 | | |
91 | 5.06k | af_gb_cleanup(); |
92 | | |
93 | 5.06k | return 0; |
94 | 5.02k | } |