/*

 * fuzz_piv_tool.c: Fuzz target for piv-tool

 *

 * Copyright (C) 2022 Red Hat, Inc.

 *

 * Author: Veronika Hanulikova <vhanulik@redhat.com>

 *

 * This library is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public

 * License as published by the Free Software Foundation; either

 * version 2.1 of the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program.  If not, see <http://www.gnu.org/licenses/>.

 */

#ifdef HAVE_CONFIG_H

#include "config.h"

#endif

#include "libopensc/internal.h"

#include <stdlib.h>

#include <string.h>

#include <stdbool.h>

#include "fuzzer_reader.h"

#include "fuzzer_tool.h"

#undef stderr

#define stderr stdout

/* Rename main for calling in fuzz target */

#define main _main

/* Connect to virtual reader instead of real card*/

#define util_connect_card(ctx, card, id, do_wait) fuzz_util_connect_card(ctx, card)

# include "tools/piv-tool.c"

#undef main

static const uint8_t *reader_data = NULL;

static size_t reader_data_size = 0;

/* Use instead of util_connect_card() */

int fuzz_util_connect_card(struct sc_context *ctx, struct sc_card **card)

{

  return fuzz_connect_card(ctx, card, NULL, reader_data, reader_data_size);

}

void initilize_global()

{

  /* Global variables need to be reser between runs,

     fuzz target is called repetitively in one execution */

  reader_data = NULL;

  reader_data_size = 0;

  ctx = NULL;

  card = NULL;

  bp = NULL;

  opt_reader = NULL;

  opt_apdus = NULL;

  opt_apdu_count = 0;

  optind = 0;

  opterr = 0; /* do not print out error messages */

  optopt = 0;

}

void test_load(char *op, const uint8_t *data, size_t size)

{

  char *filename = NULL;

  char *argv[] = {"./fuzz_piv", op, NULL /*ref*/, "-i", NULL /*filename*/, "-A", NULL /*admin*/, NULL};

  int argc = 7;

  char *opt_ref = NULL, *opt_admin = NULL;

  if (!(opt_ref = extract_word(&data, &size)))

    return;

  argv[2] = opt_ref;

  if (!(opt_admin = extract_word(&data, &size))) {

    free(opt_ref);

    return;

  }

  argv[6] = opt_admin;

  if (create_input_file(&filename, &data, &size) != 0) {

    free(opt_ref);

    free(opt_admin);

    remove_file(filename);

    return;

  }

  argv[4] = filename;

  reader_data = data;

  reader_data_size = size;

  _main(argc, argv);

  free(opt_ref);

  free(opt_admin);

  remove_file(filename);

}

/* Skip argv with option for output file */

int present_outfile(int argc, char *argv[])

{

  const struct option _options[] = {

    { "out",1, NULL,'o' },

    { NULL, 0, NULL, 0 }

  };

  int c;

  while ((c = getopt_long(argc, argv, "o:", _options, (int *) 0)) != -1) {

    switch (c) {

      case 'o':

        return 1;

      default:

        continue;

    }

  }

  optind = 0;

  optopt = 0;

  return 0;

}

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)

{

  uint8_t operation = 0;

  char *filename = NULL;

  char **argv = NULL;

  int argc = 0;

  char auth_path[50] = {0};

#ifdef FUZZING_ENABLED

  fclose(stdout);

#endif

  if (size < 10)

    return 0;

  initilize_global();

  operation = data[0];

  data++;

  size--;

  /* extract admin argument and set file with admin key */

  if (create_input_file(&filename, &data, &size) != 0 || size < 3)

    goto err;

  sprintf(auth_path, "PIV_EXT_AUTH_KEY=%s", filename);

  putenv(auth_path);

  switch (operation) {

    case 0:

      test_load("-O", data, size);

      break;

    case 1:

      test_load("-C", data, size);

      break;

    case 2:

      test_load("-Z", data, size);

      break;

    default:

      if (get_fuzzed_argv("./fuzz_piv", data, size, &argv, &argc, &reader_data, &reader_data_size) != 0)

        goto err;

      if (present_outfile(argc, argv)) {

        free_arguments(argc, argv);

        goto err;

      }

      _main(argc, argv);

      free_arguments(argc, argv);

  }

err:

  reader_data = NULL;

  reader_data_size = 0;

  remove_file(filename);

  return 0;

}