68 lines
1.8 KiB
C++
68 lines
1.8 KiB
C++
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include <cassert>
|
|
#include <cstddef>
|
|
#include <cstdint>
|
|
|
|
#include "nss_scoped_ptrs.h"
|
|
#include "p12.h"
|
|
#include "pk11pub.h"
|
|
#include "seccomon.h"
|
|
|
|
#include "asn1/mutators.h"
|
|
#include "base/database.h"
|
|
#include "base/mutate.h"
|
|
|
|
static SECItem* nicknameCollision(SECItem* oldNick, PRBool* cancel,
|
|
void* wincx) {
|
|
*cancel = true;
|
|
return nullptr;
|
|
}
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
|
|
static NSSDatabase db = NSSDatabase();
|
|
|
|
ScopedPK11SlotInfo slot(PK11_GetInternalSlot());
|
|
assert(slot);
|
|
|
|
// Initialize the decoder.
|
|
SECItem pwItem = {siBuffer, nullptr, 0};
|
|
ScopedSEC_PKCS12DecoderContext dcx(
|
|
SEC_PKCS12DecoderStart(&pwItem, slot.get(), nullptr, nullptr, nullptr,
|
|
nullptr, nullptr, nullptr));
|
|
assert(dcx);
|
|
|
|
SECStatus rv = SEC_PKCS12DecoderUpdate(dcx.get(), (unsigned char*)data, size);
|
|
if (rv != SECSuccess) {
|
|
return 0;
|
|
}
|
|
|
|
// Verify the blob.
|
|
rv = SEC_PKCS12DecoderVerify(dcx.get());
|
|
if (rv != SECSuccess) {
|
|
return 0;
|
|
}
|
|
|
|
// Validate bags.
|
|
rv = SEC_PKCS12DecoderValidateBags(dcx.get(), nicknameCollision);
|
|
if (rv != SECSuccess) {
|
|
return 0;
|
|
}
|
|
|
|
// Import cert and key.
|
|
rv = SEC_PKCS12DecoderImportBags(dcx.get());
|
|
if (rv != SECSuccess) {
|
|
return 0;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
extern "C" size_t LLVMFuzzerCustomMutator(uint8_t* data, size_t size,
|
|
size_t maxSize, unsigned int seed) {
|
|
return CustomMutate(
|
|
Mutators({ASN1Mutators::FlipConstructed, ASN1Mutators::ChangeType}), data,
|
|
size, maxSize, seed);
|
|
}
|