/* SPDX-License-Identifier: MPL-2.0 */ #ifdef ZMQ_USE_FUZZING_ENGINE #include #endif #include "testutil.hpp" #include "testutil_security.hpp" // Test that the ZMTP engine handles invalid handshake when connecting // https://rfc.zeromq.org/spec/37/ // https://rfc.zeromq.org/spec/26/ extern "C" int LLVMFuzzerTestOneInput (const uint8_t *data, size_t size) { const char *fixed_client_public = "{{k*81)yMWEF{/BxdMd[5RL^qRFxBgoL<8m.D^KD"; const char *fixed_client_secret = "N?Gmik8R[2ACw{b7*[-$S6[4}aO#?DB?#== 64) { send (server_accept, (void *) data, 64, MSG_NOSIGNAL); data += 64; size -= 64; } recv (server_accept, buf, 64, 0); // Then expect HELLO and send WELCOME if there's enough data if (size >= 170) { recv (server_accept, buf, 202, 0); send (server_accept, (void *) data, 170, MSG_NOSIGNAL); data += 170; size -= 170; } // Then expect INITIATE and send READY if there's enough data if (size >= 72) { recv (server_accept, buf, 512, 0); send (server_accept, (void *) data, 72, MSG_NOSIGNAL); data += 72; size -= 72; } msleep (250); for (ssize_t sent = 0; size > 0 && (sent != -1 || errno == EINTR); size -= sent > 0 ? sent : 0, data += sent > 0 ? sent : 0) sent = send (server_accept, (const char *) data, size, MSG_NOSIGNAL); recv (server_accept, buf, 512, MSG_DONTWAIT); msleep (250); zmq_msg_t msg; zmq_msg_init (&msg); while (-1 != zmq_msg_recv (&msg, client, ZMQ_DONTWAIT)) { zmq_msg_close (&msg); zmq_msg_init (&msg); } close (server_accept); close (server); test_context_socket_close_zero_linger (client); test_context_socket_close_zero_linger (client_mon); teardown_test_context (); return 0; } #ifndef ZMQ_USE_FUZZING_ENGINE void test_connect_curve_fuzzer () { uint8_t **data; size_t *len, num_cases = 0; if (fuzzer_corpus_encode ( "tests/libzmq-fuzz-corpora/test_connect_curve_fuzzer_seed_corpus", &data, &len, &num_cases) != 0) exit (77); while (num_cases-- > 0) { TEST_ASSERT_SUCCESS_ERRNO ( LLVMFuzzerTestOneInput (data[num_cases], len[num_cases])); free (data[num_cases]); } free (data); free (len); } int main (int argc, char **argv) { setup_test_environment (); UNITY_BEGIN (); RUN_TEST (test_connect_curve_fuzzer); return UNITY_END (); } #endif