libreoffice-online

History

Miklos Vajna da11acd8c5 StatusLine::parse: handle non-null-terminated buffer with std::atoi() Signed-off-by: Miklos Vajna <vmiklos@collabora.com> Change-Id: I51033bc4d3f97f5ae93abce1b5f19ef6a8b296d8		2021-04-23 15:32:21 +02:00
..
admin-data
data
httpheader-data	Add an initial libfuzzer based fuzzer for http::Header::parse()	2021-04-22 15:56:58 +02:00
httpstatus-data	StatusLine::parse: handle non-null-terminated buffer with std::atoi()	2021-04-23 15:32:21 +02:00
Admin.cpp	HttpRequest: add missing config.h include	2021-03-30 12:23:09 +02:00
ClientSession.cpp	HttpRequest: add missing config.h include	2021-03-30 12:23:09 +02:00
HttpHeader.cpp	Add an initial libfuzzer based fuzzer for http::Header::parse()	2021-04-22 15:56:58 +02:00
HttpStatus.cpp	Add a fuzzer for http::StatusLine::parse()	2021-04-23 09:02:21 +02:00
README	Add a fuzzer for http::StatusLine::parse()	2021-04-23 09:02:21 +02:00

README

These fuzzers are meant to be built and executed inside lode.git's sanitizers
environment (currently enables both asan and ubsan).

online.git can be built the usual way, just the additional `--enable-fuzzers`
flag is needed to build the fuzzers. It is useful to do this in a separate
build tree, since the fuzzers config doesn't produce a `loolwsd` binary.

Run the fuzzers like this:

- Admin:

----
./admin_fuzzer -max_len=16384 fuzzer/admin-data/
----

- ClientSession:

----
./clientsession_fuzzer -max_len=16384 fuzzer/data/
----

- HttpHeader (less useful, found no problems so far):

----
./httpheader_fuzzer -max_len=16384 fuzzer/httpheader-data/
----

- HttpStatus:

----
./httpstatus_fuzzer -max_len=16384 fuzzer/httpstatus-data/
----