fuzz: Add fuzzer for RawNetworkMessage.

This commit is contained in:
Carl Dong 2019-05-21 11:36:50 -04:00 committed by Matt Corallo
parent 98796576d2
commit 836fdce475
2 changed files with 56 additions and 0 deletions

View File

@ -51,3 +51,7 @@ path = "fuzz_targets/outpoint_string.rs"
[[bin]] [[bin]]
name = "deserialize_psbt" name = "deserialize_psbt"
path = "fuzz_targets/deserialize_psbt.rs" path = "fuzz_targets/deserialize_psbt.rs"
[[bin]]
name = "deserialize_raw_network_message"
path = "fuzz_targets/deserialize_raw_network_message.rs"

View File

@ -0,0 +1,52 @@
extern crate bitcoin;
fn do_test(data: &[u8]) {
let _: Result<bitcoin::network::message::RawNetworkMessage, _> = bitcoin::consensus::encode::deserialize(data);
}
#[cfg(feature = "afl")]
#[macro_use] extern crate afl;
#[cfg(feature = "afl")]
fn main() {
fuzz!(|data| {
do_test(&data);
});
}
#[cfg(feature = "honggfuzz")]
#[macro_use] extern crate honggfuzz;
#[cfg(feature = "honggfuzz")]
fn main() {
loop {
fuzz!(|data| {
do_test(data);
});
}
}
#[cfg(test)]
mod tests {
fn extend_vec_from_hex(hex: &str, out: &mut Vec<u8>) {
let mut b = 0;
for (idx, c) in hex.as_bytes().iter().enumerate() {
b <<= 4;
match *c {
b'A'...b'F' => b |= c - b'A' + 10,
b'a'...b'f' => b |= c - b'a' + 10,
b'0'...b'9' => b |= c - b'0',
_ => panic!("Bad hex"),
}
if (idx & 1) == 1 {
out.push(b);
b = 0;
}
}
}
#[test]
fn duplicate_crash() {
let mut a = Vec::new();
extend_vec_from_hex("00", &mut a);
super::do_test(&a);
}
}