Merge pull request #44 from Shnatsel/master

Add fuzzing harness and seeds

fuzz/Cargo.toml

@@ -0,0 +1,30 @@
+
+[package]
+name = "tungstenite-fuzz"
+version = "0.0.1"
+authors = ["Sergey \"Shnatsel\" Davidoff <shnatsel@gmail.com>"]
+publish = false
+
+[package.metadata]
+cargo-fuzz = true
+
+[dependencies.tungstenite]
+path = ".."
+[dependencies.libfuzzer-sys]
+git = "https://github.com/rust-fuzz/libfuzzer-sys.git"
+
+# Prevent this from interfering with workspaces
+[workspace]
+members = ["."]
+
+[[bin]]
+name = "parse_frame"
+path = "fuzz_targets/parse_frame.rs"
+
+[[bin]]
+name = "read_message_server"
+path = "fuzz_targets/read_message_server.rs"
+
+[[bin]]
+name = "read_message_client"
+path = "fuzz_targets/read_message_client.rs"

fuzz/fuzz_targets/parse_frame.rs

@@ -0,0 +1,12 @@
+#![no_main]
+#[macro_use] extern crate libfuzzer_sys;
+extern crate tungstenite;
+
+use std::io::Cursor;
+
+fuzz_target!(|data: &[u8]| {
+    let vector: Vec<u8> = data.into();
+    let mut cursor = Cursor::new(vector);
+
+    tungstenite::protocol::frame::Frame::parse(&mut cursor);
+});

fuzz/fuzz_targets/read_message_client.rs

@@ -0,0 +1,37 @@
+#![no_main]
+#[macro_use] extern crate libfuzzer_sys;
+extern crate tungstenite;
+
+use std::io;
+use std::io::Cursor;
+use tungstenite::WebSocket;
+use tungstenite::protocol::Role;
+//use std::result::Result;
+
+// FIXME: copypasted from tungstenite's protocol/mod.rs
+
+struct WriteMoc<Stream>(Stream);
+
+impl<Stream> io::Write for WriteMoc<Stream> {
+    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
+        Ok(buf.len())
+    }
+    fn flush(&mut self) -> io::Result<()> {
+        Ok(())
+    }
+}
+
+impl<Stream: io::Read> io::Read for WriteMoc<Stream> {
+    fn read(&mut self, buf: &mut [u8]) -> io::Result<usize> {
+        self.0.read(buf)
+    }
+}
+
+// end of copypasta
+
+fuzz_target!(|data: &[u8]| {
+    //let vector: Vec<u8> = data.into();
+    let cursor = Cursor::new(data);
+    let mut socket = WebSocket::from_raw_socket(WriteMoc(cursor), Role::Client, None);
+    socket.read_message();
+});

fuzz/fuzz_targets/read_message_server.rs

@@ -0,0 +1,37 @@
+#![no_main]
+#[macro_use] extern crate libfuzzer_sys;
+extern crate tungstenite;
+
+use std::io;
+use std::io::Cursor;
+use tungstenite::WebSocket;
+use tungstenite::protocol::Role;
+//use std::result::Result;
+
+// FIXME: copypasted from tungstenite's protocol/mod.rs
+
+struct WriteMoc<Stream>(Stream);
+
+impl<Stream> io::Write for WriteMoc<Stream> {
+    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
+        Ok(buf.len())
+    }
+    fn flush(&mut self) -> io::Result<()> {
+        Ok(())
+    }
+}
+
+impl<Stream: io::Read> io::Read for WriteMoc<Stream> {
+    fn read(&mut self, buf: &mut [u8]) -> io::Result<usize> {
+        self.0.read(buf)
+    }
+}
+
+// end of copypasta
+
+fuzz_target!(|data: &[u8]| {
+    //let vector: Vec<u8> = data.into();
+    let cursor = Cursor::new(data);
+    let mut socket = WebSocket::from_raw_socket(WriteMoc(cursor), Role::Server, None);
+    socket.read_message();
+});

fuzz/seeds/parse_frame/0b3a842c0b93a42d724bbab2504ae92f0593232a

@@ -0,0 +1 @@
+<EFBFBD>

fuzz/seeds/parse_frame/0e1990ce3bb9b7c62d5e11b83514467eca3be187

@@ -0,0 +1 @@
+<EFBFBD>


fuzz/seeds/parse_frame/0fe89d4911d87df66f98147a0fd1f3624f34cdaa

@@ -0,0 +1 @@
+

:
::<EFBFBD>

fuzz/seeds/parse_frame/51112bf88688ede230dd473db8fa0be2b945e636

@@ -0,0 +1 @@
+:

fuzz/seeds/parse_frame/7a0edc789a1d22737bfbb4cb29f26d994614cb80

@@ -0,0 +1 @@
+r<EFBFBD>

fuzz/seeds/parse_frame/9cf76db0663ea4025bbf89de1dfbb2ff818a26ae

@@ -0,0 +1 @@
+M

fuzz/seeds/parse_frame/bd811f21956aa72bb5a9114bdf4dc61e1710ad44

@@ -0,0 +1 @@
+{

fuzz/seeds/parse_frame/ec7d070174e40ace678006d0c631026f1d9a0779

@@ -0,0 +1 @@
+<EFBFBD>

fuzz/seeds/read_message_client/00eab9387f47a4a5730f86495676590ed99648ad

@@ -0,0 +1 @@
+┬В@┬В@┬В@┬В@

fuzz/seeds/read_message_client/0498cb7cb6ed1243ca48bc23134d69eabb08f9ac

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>*

fuzz/seeds/read_message_client/0536c7abab6c1dca55cda6c0a3b4d0a59ddf7bef

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0<EFBFBD><EFBFBD>0

fuzz/seeds/read_message_client/072bbbc39681c0e141cb9d3d739e3dd0655370c0

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>

fuzz/seeds/read_message_client/0941558f2b2cae40388e0b813da0c2987988a3e3

@@ -0,0 +1 @@
+

<EFBFBD>

fuzz/seeds/read_message_client/0e1990ce3bb9b7c62d5e11b83514467eca3be187

@@ -0,0 +1 @@
+<EFBFBD>


fuzz/seeds/read_message_client/0fa68637010fb6f345609f4b329ee3597f8d4d01

@@ -0,0 +1 @@
+<EFBFBD>ο

fuzz/seeds/read_message_client/1238b8d4729c0d1bf2a76efeff3cb2183d64a076

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD><EFBFBD>H

fuzz/seeds/read_message_client/12a340d7897fe713fc8f02ac5365b86ebf353178

@@ -0,0 +1 @@
+



fuzz/seeds/read_message_client/16473cd9f3bd4fbafc953f5be2ce09a0efd340af

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>

fuzz/seeds/read_message_client/1794eed6226d2284c3625f4e8eceec71c9eaaeb9

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>A<EFBFBD><EFBFBD>s<EFBFBD><EFBFBD>A<EFBFBD><EFBFBD>(

fuzz/seeds/read_message_client/189cc800bd0d32f454bd5ec77fe18d0778895203

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD>

fuzz/seeds/read_message_client/2058be72006b00ce316ab6ec3a0461f6d416e340

@@ -0,0 +1 @@
+<EFBFBD><EFBFBD><EFBFBD><EFBFBD>+<EFBFBD><EFBFBD>