stun-1/fuzz.go

// +build gofuzz

package stun

import (
	"encoding/binary"
	"fmt"
)

var m = New()

// FuzzMessage is go-fuzz endpoint for message.
func FuzzMessage(data []byte) int {
	m.Reset()
	// fuzzer dont know about cookies
	binary.BigEndian.PutUint32(data[4:8], magicCookie)
	// trying to read data as message
	if _, err := m.Write(data); err != nil {
		return 0
	}
	m2 := New()
	if _, err := m2.Write(m.Raw); err != nil {
		panic(err)
	}
	if m2.TransactionID != m.TransactionID {
		panic("transaction ID mismatch")
	}
	if m2.Type != m.Type {
		panic("type missmatch")
	}
	if len(m2.Attributes) != len(m.Attributes) {
		panic("attributes length missmatch")
	}
	return 1
}

// FuzzType is go-fuzz endpoint for message type.
func FuzzType(data []byte) int {
	t := MessageType{}
	vt, _ := binary.Uvarint(data)
	v := uint16(vt) & 0x1fff // first 3 bits are empty
	t.ReadValue(v)
	v2 := t.Value()
	if v != v2 {
		panic("v != v2")
	}
	t2 := MessageType{}
	t2.ReadValue(v2)
	if t2 != t {
		panic("t2 != t")
	}
	return 0
}

type attr interface {
	Getter
	Setter
}

type attrs []struct {
	g attr
	t AttrType
}

func (a attrs) pick(v byte) struct {
	g attr
	t AttrType
} {
	idx := int(v) % len(a)
	return a[idx]
}

func FuzzSetters(data []byte) int {
	var (
		m1 = &Message{
			Raw: make([]byte, 0, 2048),
		}
		m2 = &Message{
			Raw: make([]byte, 0, 2048),
		}
		m3 = &Message{
			Raw: make([]byte, 0, 2048),
		}
	)
	attributes := attrs{
		{new(Realm), AttrRealm},
		{new(XORMappedAddress), AttrXORMappedAddress},
		{new(Nonce), AttrNonce},
		{new(Software), AttrSoftware},
		{new(AlternateServer), AttrAlternateServer},
		{new(ErrorCodeAttribute), AttrErrorCode},
		{new(UnknownAttributes), AttrUnknownAttributes},
		{new(Username), AttrUsername},
		{new(MappedAddress), AttrMappedAddress},
		{new(Realm), AttrRealm},
	}
	firstByte := byte(0)
	if len(data) > 0 {
		firstByte = data[0]
	}
	a := attributes.pick(firstByte)
	value := data
	if len(data) > 1 {
		value = value[1:]
	}
	m1.WriteHeader()
	m1.Add(a.t, value)
	err := a.g.GetFrom(m1)
	if err == ErrAttributeNotFound {
		fmt.Println("unexpected 404")
		panic(err)
	}
	if err != nil {
		return 1
	}
	m2.WriteHeader()
	if err = a.g.AddTo(m2); err != nil {
		// We allow decoding some text attributes
		// when their length is too big, but
		// not encoding.
		if !IsAttrSizeOverflow(err) {
			panic(err)
		}
		return 1
	}
	m3.WriteHeader()
	v, err := m2.Get(a.t)
	if err != nil {
		panic(err)
	}
	m3.Add(a.t, v)

	if !m2.Equal(m3) {
		fmt.Println(m2, "not equal", m3)
		panic("not equal")
	}
	return 1
}