fuzz-dns.c 1.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778
  1. /*
  2. * Copyright (C) 2023 Teluu Inc. (http://www.teluu.com)
  3. *
  4. * This program is free software; you can redistribute it and/or modify
  5. * it under the terms of the GNU General Public License as published by
  6. * the Free Software Foundation; either version 2 of the License, or
  7. * (at your option) any later version.
  8. *
  9. * This program is distributed in the hope that it will be useful,
  10. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  12. * GNU General Public License for more details.
  13. *
  14. * You should have received a copy of the GNU General Public License
  15. * along with this program; if not, write to the Free Software
  16. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  17. */
  18. #include <stdio.h>
  19. #include <stdint.h>
  20. #include <stdlib.h>
  21. #include <pjlib.h>
  22. #include <pjlib-util/dns.h>
  23. #define kMinInputLength 10
  24. #define kMaxInputLength 5120
  25. pj_pool_factory *mem;
  26. int dns_parser(char *data, size_t size)
  27. {
  28. int ret = 0;
  29. pj_pool_t *pool;
  30. pj_status_t status;
  31. pj_dns_parsed_packet *dns;
  32. pool = pj_pool_create(mem, "dns_test", 4000, 4000, NULL);
  33. status = pj_dns_parse_packet(pool, data, size, &dns);
  34. if (status != PJ_SUCCESS)
  35. ret = 1;
  36. pj_pool_release(pool);
  37. return ret;
  38. }
  39. extern int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)
  40. {
  41. int ret = 0;
  42. char *data;
  43. pj_caching_pool caching_pool;
  44. if (Size < kMinInputLength || Size > kMaxInputLength) {
  45. return 1;
  46. }
  47. /* Add null termination for the data */
  48. data = (char *)calloc((Size+1), sizeof(char));
  49. memcpy((void *)data, (void *)Data, Size);
  50. /* Init */
  51. pj_init();
  52. pj_caching_pool_init(&caching_pool, &pj_pool_factory_default_policy, 0);
  53. pj_log_set_level(0);
  54. mem = &caching_pool.factory;
  55. /* Fuzz */
  56. ret = dns_parser(data, Size);
  57. free(data);
  58. pj_caching_pool_destroy(&caching_pool);
  59. return ret;
  60. }