Browse Source
* fuzz: lay down the foundation for continuous fuzzing * improve the fuzzers and add some * fuzz: add Fuzzit badge to README & enable fuzzers submission in CI * v2-fuzz: do away with the submodule approach for fuzzers * fuzz: enable fuzzitmaster
Mohammed Al Sahaf
5 years ago
committed by
Matt Holt
9 changed files with 394 additions and 133 deletions
@ -0,0 +1,30 @@ |
|||
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|||
//
|
|||
// Licensed under the Apache License, Version 2.0 (the "License");
|
|||
// you may not use this file except in compliance with the License.
|
|||
// You may obtain a copy of the License at
|
|||
//
|
|||
// http://www.apache.org/licenses/LICENSE-2.0
|
|||
//
|
|||
// Unless required by applicable law or agreed to in writing, software
|
|||
// distributed under the License is distributed on an "AS IS" BASIS,
|
|||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|||
// See the License for the specific language governing permissions and
|
|||
// limitations under the License.
|
|||
|
|||
// +build gofuzz
|
|||
// +build gofuzz_libfuzzer
|
|||
|
|||
package caddy |
|||
|
|||
import ( |
|||
"bytes" |
|||
) |
|||
|
|||
func FuzzAdmin(data []byte) (score int) { |
|||
err := Load(bytes.NewReader(data)) |
|||
if err != nil { |
|||
return 0 |
|||
} |
|||
return 1 |
|||
} |
@ -0,0 +1,49 @@ |
|||
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|||
//
|
|||
// Licensed under the Apache License, Version 2.0 (the "License");
|
|||
// you may not use this file except in compliance with the License.
|
|||
// You may obtain a copy of the License at
|
|||
//
|
|||
// http://www.apache.org/licenses/LICENSE-2.0
|
|||
//
|
|||
// Unless required by applicable law or agreed to in writing, software
|
|||
// distributed under the License is distributed on an "AS IS" BASIS,
|
|||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|||
// See the License for the specific language governing permissions and
|
|||
// limitations under the License.
|
|||
|
|||
// +build gofuzz
|
|||
// +build gofuzz_libfuzzer
|
|||
|
|||
package httpcaddyfile |
|||
|
|||
import ( |
|||
"bytes" |
|||
|
|||
"github.com/caddyserver/caddy/v2" |
|||
"github.com/caddyserver/caddy/v2/caddyconfig/caddyfile" |
|||
) |
|||
|
|||
func FuzzHTTPCaddyfileAdapter(data []byte) int { |
|||
adapter := caddyfile.Adapter{ |
|||
ServerType: ServerType{}, |
|||
} |
|||
b, warns, err := adapter.Adapt(data, nil) |
|||
// Adapt func calls the Setup() func of the ServerType,
|
|||
// thus it's going across multiple layers, each can
|
|||
// return warnings or errors. Marking the presence of
|
|||
// errors or warnings as interesting in this case
|
|||
// could push the fuzzer towards a path where we only
|
|||
// catch errors. Let's push the fuzzer to where it passes
|
|||
// but breaks.
|
|||
if (err != nil) || (warns != nil && len(warns) > 0) { |
|||
return 0 |
|||
} |
|||
|
|||
// adapted Caddyfile should be parseable by the configuration loader in admin.go
|
|||
err = caddy.Load(bytes.NewReader(b)) |
|||
if err != nil { |
|||
return 0 |
|||
} |
|||
return 1 |
|||
} |
@ -0,0 +1,29 @@ |
|||
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|||
//
|
|||
// Licensed under the Apache License, Version 2.0 (the "License");
|
|||
// you may not use this file except in compliance with the License.
|
|||
// You may obtain a copy of the License at
|
|||
//
|
|||
// http://www.apache.org/licenses/LICENSE-2.0
|
|||
//
|
|||
// Unless required by applicable law or agreed to in writing, software
|
|||
// distributed under the License is distributed on an "AS IS" BASIS,
|
|||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|||
// See the License for the specific language governing permissions and
|
|||
// limitations under the License.
|
|||
|
|||
// +build gofuzz
|
|||
// +build gofuzz_libfuzzer
|
|||
|
|||
package httpcaddyfile |
|||
|
|||
func FuzzParseAddress(data []byte) int { |
|||
addr, err := ParseAddress(string(data)) |
|||
if err != nil { |
|||
if addr == (Address{}) { |
|||
return 1 |
|||
} |
|||
return 0 |
|||
} |
|||
return 1 |
|||
} |
@ -0,0 +1,26 @@ |
|||
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|||
//
|
|||
// Licensed under the Apache License, Version 2.0 (the "License");
|
|||
// you may not use this file except in compliance with the License.
|
|||
// You may obtain a copy of the License at
|
|||
//
|
|||
// http://www.apache.org/licenses/LICENSE-2.0
|
|||
//
|
|||
// Unless required by applicable law or agreed to in writing, software
|
|||
// distributed under the License is distributed on an "AS IS" BASIS,
|
|||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|||
// See the License for the specific language governing permissions and
|
|||
// limitations under the License.
|
|||
|
|||
// +build gofuzz
|
|||
// +build gofuzz_libfuzzer
|
|||
|
|||
package caddy |
|||
|
|||
func FuzzParseNetworkAddress(data []byte) int { |
|||
_, _, err := ParseNetworkAddress(string(data)) |
|||
if err != nil { |
|||
return 0 |
|||
} |
|||
return 1 |
|||
} |
@ -0,0 +1,26 @@ |
|||
// Copyright 2015 Matthew Holt and The Caddy Authors
|
|||
//
|
|||
// Licensed under the Apache License, Version 2.0 (the "License");
|
|||
// you may not use this file except in compliance with the License.
|
|||
// You may obtain a copy of the License at
|
|||
//
|
|||
// http://www.apache.org/licenses/LICENSE-2.0
|
|||
//
|
|||
// Unless required by applicable law or agreed to in writing, software
|
|||
// distributed under the License is distributed on an "AS IS" BASIS,
|
|||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|||
// See the License for the specific language governing permissions and
|
|||
// limitations under the License.
|
|||
|
|||
// +build gofuzz
|
|||
// +build gofuzz_libfuzzer
|
|||
|
|||
package caddy |
|||
|
|||
func FuzzReplacer(data []byte) (score int) { |
|||
NewReplacer().ReplaceAll(string(data), "") |
|||
NewReplacer().ReplaceAll(NewReplacer().ReplaceAll(string(data), ""), "") |
|||
NewReplacer().ReplaceAll(NewReplacer().ReplaceAll(string(data), ""), NewReplacer().ReplaceAll(string(data), "")) |
|||
NewReplacer().ReplaceAll(string(data[:len(data)/2]), string(data[len(data)/2:])) |
|||
return 0 |
|||
} |
Loading…
Reference in new issue