Coverage Report

Created: 2026-09-12 06:55

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/openssl41/fuzz/decoder.c
Line
Count
Source
1
/*
2
 * Copyright 2023-2026 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License");
5
 * you may not use this file except in compliance with the License.
6
 * You may obtain a copy of the License at
7
 * https://www.openssl.org/source/license.html
8
 * or in the file LICENSE in the source distribution.
9
 */
10
11
#include <openssl/decoder.h>
12
#include <openssl/err.h>
13
#include <openssl/rand.h>
14
#include "fuzzer.h"
15
16
static ASN1_PCTX *pctx;
17
18
int FuzzerInitialize(int *argc, char ***argv)
19
28
{
20
28
    FuzzerSetRand();
21
22
28
    OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CRYPTO_STRINGS
23
28
            | OPENSSL_INIT_ADD_ALL_CIPHERS
24
28
            | OPENSSL_INIT_ADD_ALL_DIGESTS,
25
28
        NULL);
26
27
28
    pctx = ASN1_PCTX_new();
28
28
    if (pctx == NULL)
29
0
        return 0;
30
28
    ASN1_PCTX_set_flags(pctx, ASN1_PCTX_FLAGS_SHOW_ABSENT | ASN1_PCTX_FLAGS_SHOW_SEQUENCE | ASN1_PCTX_FLAGS_SHOW_SSOF | ASN1_PCTX_FLAGS_SHOW_TYPE | ASN1_PCTX_FLAGS_SHOW_FIELD_STRUCT_NAME);
31
28
    ASN1_PCTX_set_str_flags(pctx, ASN1_STRFLGS_UTF8_CONVERT | ASN1_STRFLGS_SHOW_TYPE | ASN1_STRFLGS_DUMP_ALL);
32
33
28
    ERR_clear_error();
34
28
    CRYPTO_free_ex_index(0, -1);
35
28
    return 1;
36
28
}
37
38
int FuzzerTestOneInput(const uint8_t *buf, size_t len)
39
7.07k
{
40
7.07k
    OSSL_DECODER_CTX *dctx;
41
7.07k
    EVP_PKEY *pkey = NULL;
42
7.07k
    EVP_PKEY_CTX *ctx = NULL;
43
7.07k
    BIO *bio;
44
45
7.07k
    bio = BIO_new(BIO_s_null());
46
7.07k
    if (bio == NULL) {
47
0
        ERR_clear_error();
48
0
        return 0;
49
0
    }
50
7.07k
    dctx = OSSL_DECODER_CTX_new_for_pkey(&pkey, NULL, NULL, NULL, 0, NULL,
51
7.07k
        NULL);
52
7.07k
    if (dctx == NULL) {
53
0
        BIO_free(bio);
54
0
        ERR_clear_error();
55
0
        return 0;
56
0
    }
57
7.07k
    if (OSSL_DECODER_from_data(dctx, &buf, &len)) {
58
3.31k
        EVP_PKEY *pkey2;
59
60
3.31k
        EVP_PKEY_print_public(bio, pkey, 1, pctx);
61
3.31k
        EVP_PKEY_print_private(bio, pkey, 1, pctx);
62
3.31k
        EVP_PKEY_print_params(bio, pkey, 1, pctx);
63
64
3.31k
        pkey2 = EVP_PKEY_dup(pkey);
65
3.31k
        if (pkey2 != NULL) {
66
3.31k
            EVP_PKEY_eq(pkey, pkey2);
67
3.31k
            EVP_PKEY_free(pkey2);
68
3.31k
        }
69
70
3.31k
        ctx = EVP_PKEY_CTX_new(pkey, NULL);
71
3.31k
        if (ctx != NULL) {
72
            /*
73
             * Param check will take too long time on large DH parameters.
74
             * Skip it.
75
             */
76
3.31k
            if ((!EVP_PKEY_is_a(pkey, "DH") && !EVP_PKEY_is_a(pkey, "DHX"))
77
483
                || EVP_PKEY_get_bits(pkey) <= 2048)
78
3.30k
                EVP_PKEY_param_check(ctx);
79
80
3.31k
            EVP_PKEY_public_check(ctx);
81
            /* Private and pairwise checks are unbounded, skip for large keys. */
82
3.31k
            if (EVP_PKEY_get_bits(pkey) <= 4096) {
83
2.93k
                EVP_PKEY_private_check(ctx);
84
2.93k
                EVP_PKEY_pairwise_check(ctx);
85
2.93k
            }
86
3.31k
            EVP_PKEY_CTX_free(ctx);
87
3.31k
        }
88
3.31k
        EVP_PKEY_free(pkey);
89
3.31k
    }
90
7.07k
    OSSL_DECODER_CTX_free(dctx);
91
92
7.07k
    BIO_free(bio);
93
7.07k
    ERR_clear_error();
94
7.07k
    return 0;
95
7.07k
}
96
97
void FuzzerCleanup(void)
98
0
{
99
0
    ASN1_PCTX_free(pctx);
100
0
    FuzzerClearRand();
101
0
}