123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778 |
- #include <library.h>
- #include <batch/pb_tnc_batch.h>
- #include <messages/ietf/pb_error_msg.h>
- #include <state_machine/pb_tnc_state_machine.h>
- #include <utils/debug.h>
- int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len)
- {
- pb_tnc_batch_t *batch;
- pb_tnc_state_machine_t *state;
- pb_tnc_msg_t *msg;
- pb_error_msg_t *error;
- enumerator_t *enumerator;
- bool from_server;
- chunk_t chunk;
- dbg_default_set_level(-1);
- library_init(NULL, "fuzz_pb_tnc");
- plugin_loader_add_plugindirs(PLUGINDIR, PLUGINS);
- if (!lib->plugins->load(lib->plugins, PLUGINS))
- {
- return 1;
- }
- chunk = chunk_create((u_char*)buf, len);
- INIT(state,
- .receive_batch = (void*)return_true,
- .set_empty_cdata = (void*)nop,
- );
-
- batch = pb_tnc_batch_create_from_data(chunk);
- if (batch->process_header(batch, TRUE, FALSE, &from_server) == SUCCESS ||
- batch->process_header(batch, TRUE, TRUE, &from_server) == SUCCESS)
- {
- batch->process(batch, state);
- }
-
- enumerator = batch->create_msg_enumerator(batch);
- while (enumerator->enumerate(enumerator, &msg))
- {
- msg->get_type(msg);
- }
- enumerator->destroy(enumerator);
-
- enumerator = batch->create_error_enumerator(batch);
- while (enumerator->enumerate(enumerator, &msg))
- {
- error = (pb_error_msg_t*)msg;
- error->get_error_code(error);
- }
- enumerator->destroy(enumerator);
- batch->destroy(batch);
- free(state);
- lib->plugins->unload(lib->plugins);
- library_deinit();
- return 0;
- }
|