aboutsummaryrefslogtreecommitdiff
path: root/src/test/fuzz
AgeCommit message (Collapse)Author
2017-11-11Fix mock_crypto_pk_public_checksig__nocheck() to handle short RSA keysNick Mathewson
This function -- a mock replacement used only for fuzzing -- would have a buffer overflow if it got an RSA key whose modulus was under 20 bytes long. Fortunately, Tor itself does not appear to have a bug here. Fixes bug 24247; bugfix on 0.3.0.3-alpha when fuzzing was introduced. Found by OSS-Fuzz; this is OSS-Fuzz issue 4177.
2017-11-06Fix a memory leak on decryption non-failure of v3 hsdescNick Mathewson
If it decrypts something that turns out to start with a NUL byte, then decrypt_desc_layer() will return 0 to indicate the length of its result. But 0 also indicates an error, which causes the result not to be freed by decrypt_desc_layer()'s callers. Since we're trying to stabilize 0.3.2.x, I've opted for the simpler possible fix here and made it so that an empty decrypted string will also count as an error. Fixes bug 24150 and OSS-Fuzz issue 3994. The original bug was present but unreachable in 0.3.1.1-alpha. I'm calling this a bugfix on 0.3.2.1-alpha since that's the first version where you could actually try to decrypt these descriptors.
2017-10-31Merge branch 'bug24082_032' into maint-0.3.2Nick Mathewson
2017-10-30Initialize the mock options in the fuzzing codeNick Mathewson
Fixes bug 24082; bugfix on 0.3.0.3-alpha. Found by Brian Carpenter.
2017-10-27In the hsdescv3 fuzzer, replace the decryption function.Nick Mathewson
The new decryption function performs no decryption, skips the salt, and doesn't check the mac. This allows us to fuzz the hs_descriptor.c code using unencrypted descriptor test, and exercise more of the code. Related to 21509.
2017-10-26fuzzing: Make hsdescv3 use the decoding API correctlyDavid Goulet
Fixes #21509 Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-10-26Revert "Temporarily disable compilation of the v3 hs fuzzing code"David Goulet
This reverts commit 5ef656e7d1b1e1e74c46bd02ce8faaa1d8d09403.
2017-09-05Resolve inconsistencies between buf refactor and HTTP connectNick Mathewson
2017-09-05Merge branch 'http_tunnel_squashed'Nick Mathewson
2017-09-05Add a fuzzer for HTTP CONNECTNick Mathewson
2017-08-28Temporarily disable compilation of the v3 hs fuzzing codeNick Mathewson
Turns out, it wasn't up-to-date with the latest v3 hs API :(
2017-08-28Fix compilation.Nick Mathewson
2017-08-28Merge remote-tracking branch 'haxxpop/fuzzing-hsv3'Nick Mathewson
2017-08-2122839: Build tor with rust enabled on winTies Stuij
- make tor_util static library name configurable - fix Rust libary dependency order for Windows
2017-08-13Fuzz outer layer of hsv3 descriptorSuphanat Chunhapanya
The code in fuzz_hsdescv3.c fuzzes the unencrypted layer of the hsv3 descriptor. We need to fuzz the encrypted layer later.
2017-06-19Remove hardwired libfuzzer path; closes 22105.Nick Mathewson
2017-05-19Merge branch 'add_rust_squashed'Nick Mathewson
2017-05-03bug#22143/prop#140: identify input diffs by their digest-as-signedNick Mathewson
See may 3 changes to prop140 for more background.
2017-04-29Add --enable-rust configure switchSebastian Hahn
Introduce a way to optionally enable Rust integration for our builds. No actual Rust code is added yet and specifying the flag has no effect other than failing the build if rustc and cargo are unavailable.
2017-04-27Clean up mentions of 'zlib' and rename the mentions to 'compressed'.Alexander Færøy
This patch cleans up in various places where 'zlib' is mentioned.
2017-04-25Use atomic counters for compressor allocation.Nick Mathewson
2017-04-25Add --enable-zstd to our configure script.Alexander Færøy
This patch adds support for enabling support for Zstandard to our configure script. By default, the --enable-zstd option is set to "auto" which means if libzstd is available we'll build Tor with Zstandard support. See: https://bugs.torproject.org/21662
2017-04-25Add --enable-lzma to our configure script.Alexander Færøy
This patch adds support for enabling support for LZMA to our configure script. By default, the --enable-lzma option is set to "auto" which means if liblzma is available we'll build Tor with LZMA support. See: https://bugs.torproject.org/21662
2017-03-16Generate src/test/fuzz/include.am from a scriptNick Mathewson
It was very error-prone to maintain this by hand.
2017-03-16Merge branch 'prop140_21643_diff_only_squashed'Nick Mathewson
2017-03-16Add fuzzers for consensus diff backend codeNick Mathewson
This takes two fuzzers: one which generates a diff and makes sure it works, and one which applies a diff. So far, they won't crash, but there's a bug in my string-manipulation code someplace that I'm having to work around, related to the case where you have a blank line at the end of a file, or where you diff a file with itself.
2017-03-15Run the copyright update script.Nick Mathewson
2017-02-14Rename make fuzz to make test-fuzz-corporaNick Mathewson
2017-02-01Fix a memory-leak in fuzz_vrs.cNick Mathewson
2017-01-30Don't use %zu in fuzz-http: windows doesn't like it.Nick Mathewson
2017-01-30Update documentation and testing integration for fuzzingNick Mathewson
2017-01-30Fix a pair of compilation errors.Nick Mathewson
2017-01-30Fix memory leak on zero-length input on fuzz_http.cNick Mathewson
2017-01-30memory leak in fuzz_vrsNick Mathewson
2017-01-30actually build .as for fuzzingNick Mathewson
2017-01-30missing backslashNick Mathewson
2017-01-30differently build oss fuzzersNick Mathewson
2017-01-30More oss-fuzz fixesNick Mathewson
2017-01-30Try to refactor OSS fuzzers into static libraries.Nick Mathewson
2017-01-30libfuzzer tweaks per recommendationsNick Mathewson
2017-01-30routerstatus fuzzingNick Mathewson
2017-01-30Add libfuzzer support.Nick Mathewson
2017-01-30Three more fuzzers: consensus, hsdesc, intro pointsNick Mathewson
2017-01-30Tools for working with directories of fuzzed stuff.Nick Mathewson
2017-01-30fuzzing: Add copyright notices and whitespace fixesNick Mathewson
2017-01-30Add microdesc format fuzzer.Nick Mathewson
2017-01-30Addition to test cases: make sure fuzzer binaries allow known casesNick Mathewson
This isn't fuzzing per se, so much as replaying the highlights of past fuzzer runs.
2017-01-30Add extrainfo fuzzerNick Mathewson
2017-01-30Try to tweak fuzzing.md to correspond to my changesNick Mathewson
2017-01-30Guide fuzzing by adding standard tor GET and POST testcasesteor
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion