unittests/sshkey/test_fuzz.c

42 onerror(void *fuzz)
44 	fprintf(stderr, "Failed during fuzz:\n");
45 	fuzz_dump((struct fuzz *)fuzz);
53 	struct fuzz *fuzz;
58 	fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | /* XXX too slow FUZZ_2_BIT_FLIP | */
66 	TEST_ONERROR(onerror, fuzz);
67 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
68 		if (sshkey_from_blob(fuzz_ptr(fuzz), fuzz_len(fuzz), &k1) == 0)
71 	fuzz_cleanup(fuzz);
77 	struct fuzz *fuzz;
83 	fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | /* too slow FUZZ_2_BIT_FLIP | */
88 	TEST_ONERROR(onerror, fuzz);
89 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
91 		if (fuzz_matches_original(fuzz))
93 		ASSERT_INT_NE(sshkey_verify(k, fuzz_ptr(fuzz), fuzz_len(fuzz),
96 	fuzz_cleanup(fuzz);
104 	struct fuzz *fuzz;
108 	TEST_START("fuzz RSA1 private");
110 	fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_1_BYTE_FLIP |
117 	TEST_ONERROR(onerror, fuzz);
118 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
119 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
126 	fuzz_cleanup(fuzz);
129 	TEST_START("fuzz RSA1 public");
131 	fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_1_BYTE_FLIP |
138 	TEST_ONERROR(onerror, fuzz);
139 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
140 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
147 	fuzz_cleanup(fuzz);
151 	TEST_START("fuzz RSA private");
153 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
159 	TEST_ONERROR(onerror, fuzz);
160 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
161 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
168 	fuzz_cleanup(fuzz);
171 	TEST_START("fuzz RSA new-format private");
173 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
179 	TEST_ONERROR(onerror, fuzz);
180 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
181 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
188 	fuzz_cleanup(fuzz);
191 	TEST_START("fuzz DSA private");
193 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
199 	TEST_ONERROR(onerror, fuzz);
200 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
201 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
208 	fuzz_cleanup(fuzz);
211 	TEST_START("fuzz DSA new-format private");
213 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
219 	TEST_ONERROR(onerror, fuzz);
220 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
221 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
228 	fuzz_cleanup(fuzz);
232 	TEST_START("fuzz ECDSA private");
234 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
240 	TEST_ONERROR(onerror, fuzz);
241 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
242 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
249 	fuzz_cleanup(fuzz);
252 	TEST_START("fuzz ECDSA new-format private");
254 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
260 	TEST_ONERROR(onerror, fuzz);
261 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
262 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
269 	fuzz_cleanup(fuzz);
273 	TEST_START("fuzz Ed25519 private");
275 	fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
281 	TEST_ONERROR(onerror, fuzz);
282 	for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
283 		r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
290 	fuzz_cleanup(fuzz);
293 	TEST_START("fuzz RSA public");
301 	TEST_START("fuzz RSA cert");
307 	TEST_START("fuzz DSA public");
315 	TEST_START("fuzz DSA cert");
322 	TEST_START("fuzz ECDSA public");
330 	TEST_START("fuzz ECDSA cert");
337 	TEST_START("fuzz Ed25519 public");
345 	TEST_START("fuzz Ed25519 cert");
351 	TEST_START("fuzz RSA sig");
359 	TEST_START("fuzz RSA SHA256 sig");
367 	TEST_START("fuzz RSA SHA512 sig");
375 	TEST_START("fuzz DSA sig");
384 	TEST_START("fuzz ECDSA sig");
393 	TEST_START("fuzz Ed25519 sig");
401 /* XXX fuzz decoded new-format blobs too */