Moved fuzz dir to test/fuzz
Extended contributing document to testing and licensing
This commit is contained in:
parent
edbbb43e1f
commit
8ede8a87b2
29 changed files with 62 additions and 1053 deletions
31
test/fuzz/restconf/README.md
Normal file
31
test/fuzz/restconf/README.md
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
# Clixon fuzzing
|
||||
|
||||
This dir contains code for fuzzing clixon restconf
|
||||
|
||||
It requires the preeny package to change sockets to stdio.
|
||||
|
||||
## Prereqs
|
||||
|
||||
Install AFL and preeny, see [..](..)
|
||||
|
||||
Build and install a clixon system (in particular the backend, RESTCONF binary will be replaced)
|
||||
|
||||
## Build
|
||||
|
||||
Build clixon restconf statically with the afl-clang compiler:
|
||||
```
|
||||
CC=/usr/bin/afl-clang-fast LINKAGE=static ./configure --with-restconf=native
|
||||
make clean
|
||||
cd apps/restconf
|
||||
make clixon_restconf
|
||||
sudo make install
|
||||
```
|
||||
|
||||
## Run tests
|
||||
|
||||
Use the script `runfuzz.sh` to run one test:
|
||||
```
|
||||
./runfuzz.sh
|
||||
```
|
||||
|
||||
After (or during) the test, investigate results in the output dir.
|
||||
10
test/fuzz/restconf/input/1.http
Normal file
10
test/fuzz/restconf/input/1.http
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
PUT /restconf/data/ietf-interfaces:interfaces/interface=eth%2f0%2f0 HTTP/1.1
|
||||
Host: 127.0.0.1
|
||||
Accept: */*
|
||||
Content-Type: application/yang-data+json
|
||||
Content-Length: 91
|
||||
|
||||
{"ietf-interfaces:interface":{"name":"eth/0/0","type":"clixon-example:eth","enabled":true}}
|
||||
|
||||
|
||||
|
||||
5
test/fuzz/restconf/input/2.http
Normal file
5
test/fuzz/restconf/input/2.http
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
GET /restconf/data/ HTTP/1.1
|
||||
Host: localhost
|
||||
Accept: application/yang-data+xml
|
||||
|
||||
|
||||
8
test/fuzz/restconf/input/3.http
Normal file
8
test/fuzz/restconf/input/3.http
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
POST /restconf/data/ietf-interfaces:interfaces HTTP/1.1
|
||||
Host: 127.0.0.1
|
||||
Accept: application/yang-data+xml
|
||||
Content-Type: application/yang-data+xml
|
||||
Content-Length: 138
|
||||
|
||||
<interface xmlns="urn:ietf:params:xml:ns:yang:ietf-interfaces"><name>eth/0/42</name><type>ex:eth</type><enabled>true</enabled></interface>
|
||||
|
||||
4
test/fuzz/restconf/input/4.http
Normal file
4
test/fuzz/restconf/input/4.http
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
DELETE /restconf/data/ietf-interfaces:interfaces HTTP/1.1
|
||||
Host: 127.0.0.1
|
||||
|
||||
|
||||
65
test/fuzz/restconf/runfuzz.sh
Executable file
65
test/fuzz/restconf/runfuzz.sh
Executable file
|
|
@ -0,0 +1,65 @@
|
|||
#!/usr/bin/env bash
|
||||
# Run a fuzzing test using american fuzzy lop
|
||||
# Add input strings in input
|
||||
set -eux
|
||||
|
||||
if [ $# -ne 0 ]; then
|
||||
echo "usage: $0"
|
||||
exit 255
|
||||
fi
|
||||
|
||||
if [ ! -x /usr/local/lib/desock.so ] ; then
|
||||
echo "preeny desock.so not found"
|
||||
exit 255
|
||||
fi
|
||||
|
||||
MEGS=500 # memory limit for child process (50 MB)
|
||||
|
||||
# remove input and input dirs
|
||||
#test ! -d input || rm -rf input
|
||||
test ! -d output || sudo rm -rf output
|
||||
|
||||
# create if dirs dont exists
|
||||
#test -d input || mkdir input
|
||||
test -d output || mkdir output
|
||||
|
||||
APPNAME=example
|
||||
cfg=conf.xml
|
||||
|
||||
cat <<EOF > $cfg
|
||||
<clixon-config xmlns="http://clicon.org/config">
|
||||
<CLICON_CONFIGFILE>$cfg</CLICON_CONFIGFILE>
|
||||
<CLICON_FEATURE>*:*</CLICON_FEATURE>
|
||||
<CLICON_YANG_DIR>/usr/local/share/clixon</CLICON_YANG_DIR>
|
||||
<CLICON_YANG_MODULE_MAIN>clixon-example</CLICON_YANG_MODULE_MAIN>
|
||||
<CLICON_SOCK>/usr/local/var/hello.sock</CLICON_SOCK>
|
||||
<CLICON_CLISPEC_DIR>/usr/local/lib/$APPNAME/clispec</CLICON_CLISPEC_DIR>
|
||||
<CLICON_CLI_DIR>/usr/local/lib/$APPNAME/cli</CLICON_CLI_DIR>
|
||||
<CLICON_CLI_MODE>$APPNAME</CLICON_CLI_MODE>
|
||||
<CLICON_BACKEND_PIDFILE>/usr/local/var/$APPNAME/$APPNAME.pidfile</CLICON_BACKEND_PIDFILE>
|
||||
<CLICON_XMLDB_DIR>/usr/local/var/$APPNAME</CLICON_XMLDB_DIR>
|
||||
<CLICON_STARTUP_MODE>init</CLICON_STARTUP_MODE>
|
||||
<CLICON_MODULE_LIBRARY_RFC7895>false</CLICON_MODULE_LIBRARY_RFC7895>
|
||||
<restconf><enable>true</enable><auth-type>none</auth-type><socket><namespace>default</namespace><address>0.0.0.0</address><port>80</port><ssl>false</ssl></socket></restconf>
|
||||
</clixon-config>
|
||||
EOF
|
||||
|
||||
# Kill previous
|
||||
echo "cfg: $cfg"
|
||||
sudo clixon_backend -z -f $cfg -s init
|
||||
|
||||
# Start backend
|
||||
sudo clixon_backend -f $cfg -s init
|
||||
|
||||
# Dryrun without afl (comment this if you run for real)
|
||||
sudo LD_PRELOAD="/usr/local/lib/desock.so" clixon_restconf -rf $cfg < input/1.http || true
|
||||
sudo LD_PRELOAD="/usr/local/lib/desock.so" clixon_restconf -rf $cfg < input/2.http || true
|
||||
sudo LD_PRELOAD="/usr/local/lib/desock.so" clixon_restconf -rf $cfg < input/3.http || true
|
||||
sudo LD_PRELOAD="/usr/local/lib/desock.so" clixon_restconf -rf $cfg < input/4.http || true
|
||||
exit
|
||||
|
||||
# Run script
|
||||
# CC=/usr/bin/afl-clang
|
||||
sudo LD_PRELOAD="/usr/local/lib/desock.so" afl-fuzz -i input -o output -d -m $MEGS -- /usr/local/sbin/clixon_restconf -rf $cfg
|
||||
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue