mirror of
https://github.com/bitcoin/bitcoin.git
synced 2025-02-05 10:17:30 -05:00
![Andrew Poelstra](/assets/img/avatar_default.png)
Blindly chose a cap of 10000 iterations for every loop, except for the two in script_ops.cpp and scriptnum_ops.cpp which appeared to (sometimes) be deserializing individual bytes; capped those to one million to ensure that sometimes we try working with massive scripts. There was also one fuzzer-controlled loop in timedata.cpp which was already capped, so I left that alone. git grep 'while (fuzz' should now run clean except for timedata.cpp
80 lines
2.3 KiB
C++
80 lines
2.3 KiB
C++
// Copyright (c) 2020-2021 The Bitcoin Core developers
|
|
// Distributed under the MIT software license, see the accompanying
|
|
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
|
|
|
|
#include <test/fuzz/FuzzedDataProvider.h>
|
|
#include <test/fuzz/fuzz.h>
|
|
#include <test/fuzz/util.h>
|
|
#include <test/util/setup_common.h>
|
|
#include <torcontrol.h>
|
|
|
|
#include <cstdint>
|
|
#include <string>
|
|
#include <vector>
|
|
|
|
class DummyTorControlConnection : public TorControlConnection
|
|
{
|
|
public:
|
|
DummyTorControlConnection() : TorControlConnection{nullptr}
|
|
{
|
|
}
|
|
|
|
bool Connect(const std::string&, const ConnectionCB&, const ConnectionCB&)
|
|
{
|
|
return true;
|
|
}
|
|
|
|
void Disconnect()
|
|
{
|
|
}
|
|
|
|
bool Command(const std::string&, const ReplyHandlerCB&)
|
|
{
|
|
return true;
|
|
}
|
|
};
|
|
|
|
void initialize_torcontrol()
|
|
{
|
|
static const auto testing_setup = MakeNoLogFileContext<>();
|
|
}
|
|
|
|
FUZZ_TARGET_INIT(torcontrol, initialize_torcontrol)
|
|
{
|
|
FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
|
|
|
|
TorController tor_controller;
|
|
LIMITED_WHILE(fuzzed_data_provider.ConsumeBool(), 10000) {
|
|
TorControlReply tor_control_reply;
|
|
CallOneOf(
|
|
fuzzed_data_provider,
|
|
[&] {
|
|
tor_control_reply.code = 250;
|
|
},
|
|
[&] {
|
|
tor_control_reply.code = 510;
|
|
},
|
|
[&] {
|
|
tor_control_reply.code = fuzzed_data_provider.ConsumeIntegral<int>();
|
|
});
|
|
tor_control_reply.lines = ConsumeRandomLengthStringVector(fuzzed_data_provider);
|
|
if (tor_control_reply.lines.empty()) {
|
|
break;
|
|
}
|
|
DummyTorControlConnection dummy_tor_control_connection;
|
|
CallOneOf(
|
|
fuzzed_data_provider,
|
|
[&] {
|
|
tor_controller.add_onion_cb(dummy_tor_control_connection, tor_control_reply);
|
|
},
|
|
[&] {
|
|
tor_controller.auth_cb(dummy_tor_control_connection, tor_control_reply);
|
|
},
|
|
[&] {
|
|
tor_controller.authchallenge_cb(dummy_tor_control_connection, tor_control_reply);
|
|
},
|
|
[&] {
|
|
tor_controller.protocolinfo_cb(dummy_tor_control_connection, tor_control_reply);
|
|
});
|
|
}
|
|
}
|