Coverage Report

Created: 2025-08-31 07:02

/src/fuzz_mroute.c
Line
Count
Source
1
/* Copyright 2021 Google LLC
2
Licensed under the Apache License, Version 2.0 (the "License");
3
you may not use this file except in compliance with the License.
4
You may obtain a copy of the License at
5
      http://www.apache.org/licenses/LICENSE-2.0
6
Unless required by applicable law or agreed to in writing, software
7
distributed under the License is distributed on an "AS IS" BASIS,
8
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
9
See the License for the specific language governing permissions and
10
limitations under the License.
11
*/
12
13
#include "config.h"
14
#include "syshead.h"
15
#include "init.h"
16
#include "mroute.h"
17
18
#include "fuzz_randomizer.h"
19
20
21
392
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
22
23
392
  fuzz_random_init(data, size);
24
392
  struct buffer buf;
25
392
  struct gc_arena gc;
26
27
392
  gc = gc_new();
28
29
392
  char *tmp = get_random_string();
30
392
  buf = string_alloc_buf(tmp, &gc);
31
392
  free(tmp);
32
33
392
  struct mroute_addr src_addr;
34
392
  struct mroute_addr dst_addr;
35
392
  mroute_addr_init(&src_addr);
36
392
  mroute_addr_init(&dst_addr);
37
392
  unsigned int ret = mroute_extract_addr_ip(&src_addr, &dst_addr, &buf);
38
39
392
  if (ret & MROUTE_EXTRACT_SUCCEEDED) {
40
172
    mroute_addr_mask_host_bits(&src_addr);
41
172
    mroute_addr_print(&src_addr, &gc);
42
172
    mroute_learnable_address(&src_addr, &gc);
43
172
  }
44
45
392
  uint16_t vid;
46
392
  struct mroute_addr a1, a2;
47
392
  mroute_addr_init(&a1);
48
392
  mroute_addr_init(&a2);
49
392
  mroute_extract_addr_ether(&a1, &a2, vid, &buf);
50
51
392
  if (size > sizeof(struct openvpn_sockaddr)) {
52
295
    struct openvpn_sockaddr local_sock;
53
295
    memcpy(&local_sock, data, sizeof(struct openvpn_sockaddr));
54
295
    mroute_extract_openvpn_sockaddr(&a1, &local_sock, true);
55
295
    mroute_extract_openvpn_sockaddr(&a1, &local_sock, false);
56
295
  }
57
58
392
  struct mroute_helper *mhelper = NULL;
59
392
  mhelper = mroute_helper_init(fuzz_randomizer_get_int(0, 0xfffffff));
60
392
  if (mhelper != NULL) {
61
392
    mroute_helper_add_iroute46(mhelper, fuzz_randomizer_get_int(0, MR_HELPER_NET_LEN-1));
62
392
    mroute_helper_free(mhelper);
63
392
  }
64
65
392
  gc_free(&gc);
66
67
392
  fuzz_random_destroy();
68
392
  return 0;
69
392
}
70