mirror of
https://github.com/vel21ripn/nDPI.git
synced 2026-04-29 15:39:42 +00:00
9fc724de5a
Start using a dictionary for fuzzing (see: https://llvm.org/docs/LibFuzzer.html#dictionaries). Remove some dead code. Fuzzing with debug enabled is not usually a great idea (from performance POV). Keep the code since it might be useful while debugging.
66 lines
2 KiB
C
66 lines
2 KiB
C
#include "ndpi_api.h"
|
|
#include "fuzz_common_code.h"
|
|
|
|
#include <stdint.h>
|
|
#include <stdio.h>
|
|
|
|
struct ndpi_detection_module_struct *ndpi_info_mod = NULL;
|
|
struct ndpi_flow_struct *flow = NULL;
|
|
|
|
extern const uint8_t *get_crypto_data(struct ndpi_detection_module_struct *ndpi_struct,
|
|
struct ndpi_flow_struct *flow,
|
|
uint32_t version,
|
|
u_int8_t *clear_payload, uint32_t clear_payload_len,
|
|
uint64_t *crypto_data_len);
|
|
extern void process_tls(struct ndpi_detection_module_struct *ndpi_struct,
|
|
struct ndpi_flow_struct *flow,
|
|
const u_int8_t *crypto_data, uint32_t crypto_data_len,
|
|
uint32_t version);
|
|
extern void process_chlo(struct ndpi_detection_module_struct *ndpi_struct,
|
|
struct ndpi_flow_struct *flow,
|
|
const u_int8_t *crypto_data, uint32_t crypto_data_len);
|
|
extern int is_version_with_tls(uint32_t version);
|
|
|
|
|
|
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
|
|
const u_int8_t *crypto_data;
|
|
uint64_t crypto_data_len;
|
|
u_int32_t first_int, version = 0;
|
|
|
|
if(ndpi_info_mod == NULL) {
|
|
fuzz_init_detection_module(&ndpi_info_mod);
|
|
|
|
flow = ndpi_calloc(1, SIZEOF_FLOW_STRUCT);
|
|
}
|
|
|
|
if(Size < 4)
|
|
return 0;
|
|
|
|
first_int = ntohl(*(u_int32_t *)Data);
|
|
if((first_int % 4) == 0)
|
|
version = 0x00000001; /* v1 */
|
|
else if((first_int % 4) == 1)
|
|
version = 0x51303530; /* Q050 */
|
|
else if((first_int % 4) == 2)
|
|
version = 0x51303436; /* Q046 */
|
|
else if((first_int % 4) == 3)
|
|
version = 0x709A50C4; /* v2 */
|
|
|
|
memset(flow, '\0', sizeof(*flow));
|
|
flow->detected_protocol_stack[0] = NDPI_PROTOCOL_QUIC;
|
|
flow->l4_proto = IPPROTO_UDP;
|
|
|
|
crypto_data = get_crypto_data(ndpi_info_mod, flow, version, (u_int8_t *)Data + 4, Size - 4, &crypto_data_len);
|
|
|
|
if(crypto_data) {
|
|
if(!is_version_with_tls(version)) {
|
|
process_chlo(ndpi_info_mod, flow, crypto_data, crypto_data_len);
|
|
} else {
|
|
process_tls(ndpi_info_mod, flow, crypto_data, crypto_data_len, version);
|
|
}
|
|
}
|
|
|
|
ndpi_free_flow_data(flow);
|
|
|
|
return 0;
|
|
}
|