Coverage Report

Created: 2026-09-01 07:03

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/openssh/regress/misc/fuzz-harness/sshsig_fuzz.cc
Line
Count
Source
1
// cc_fuzz_target test for sshsig verification.
2
3
#include <stddef.h>
4
#include <stdio.h>
5
#include <stdint.h>
6
#include <stdlib.h>
7
#include <string.h>
8
9
extern "C" {
10
11
#include "includes.h"
12
#include "sshkey.h"
13
#include "ssherr.h"
14
#include "sshbuf.h"
15
#include "sshsig.h"
16
#include "log.h"
17
18
int LLVMFuzzerTestOneInput(const uint8_t* sig, size_t slen)
19
3.35k
{
20
3.35k
  static const char *data = "If everyone started announcing his nose had "
21
3.35k
      "run away, I don’t know how it would all end";
22
3.35k
  struct sshbuf *signature = sshbuf_from(sig, slen);
23
3.35k
  struct sshbuf *message = sshbuf_from(data, strlen(data));
24
3.35k
  struct sshkey *k = NULL;
25
3.35k
  struct sshkey_sig_details *details = NULL;
26
3.35k
  extern char *__progname;
27
28
3.35k
  log_init(__progname, SYSLOG_LEVEL_QUIET, SYSLOG_FACILITY_USER, 1);
29
3.35k
  sshsig_verifyb(signature, message, "castle", &k, &details);
30
3.35k
  sshkey_sig_details_free(details);
31
3.35k
  sshkey_free(k);
32
3.35k
  sshbuf_free(signature);
33
3.35k
  sshbuf_free(message);
34
3.35k
  return 0;
35
3.35k
}
36
37
} // extern