• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

randombit / botan / 5356326050

23 Jun 2023 01:05PM UTC coverage: 91.728% (-0.008%) from 91.736%
5356326050

Pull #3595

github

web-flow
Merge a5b917599 into 92171c524
Pull Request #3595: Improve clang-tidy coverage

78163 of 85212 relevant lines covered (91.73%)

12690161.35 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

37.7
/src/fuzzer/tls_server.cpp
1
/*
2
* (C) 2015,2016 Jack Lloyd
3
*
4
* Botan is released under the Simplified BSD License (see license.txt)
5
*/
6

7
#include "fuzzers.h"
8

9
#include <botan/data_src.h>
10
#include <botan/pkcs8.h>
11
#include <botan/tls_server.h>
12
#include <botan/tls_session_manager_noop.h>
13

14
#include <memory>
15

16
namespace {
17

18
const char* const fixed_rsa_key =
19
   "-----BEGIN PRIVATE KEY-----\n"
20
   "MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCe6qqpMQVJ7zCJ\n"
21
   "oSnpxia0yO6M7Ie3FGqPcd0DzueC+kWPvuHQ+PpP5vfO6qqRaDVII37PFX5NUZQm\n"
22
   "GK/rAm7spjIHTCMgqSZ8pN13LU8m1gDwIdu9al16LXN9zZjB67uLlFn2trtLi234\n"
23
   "i0cnyeF8IC0cz7tgCOzMSVEBcqJjkdgGrZ3WUgOXecVm2lXVrYlEiaSxFp4VOE9k\n"
24
   "RFeVrELCjmNtc4hRd1yJsF+vObCtvyqGYQE1Qcb0MVSQDBHMkiUVmO6zuW7td5ef\n"
25
   "O/1OyntQJGyVa+SnWbkSLCybta2J7MreHENrF5GA0K1KL140SNRHeWifRMuNQua7\n"
26
   "qmKXMBTFAgMBAAECggEAIk3fxyQI0zvpy1vZ01ft1QqmzA7nAPNMSWi33/GS8iga\n"
27
   "SfxXfKeySPs/tQ/dAARxs//NiOBH4mLgyxR7LQzaawU5OXALCSraXv+ruuUx990s\n"
28
   "WKnGaG4EfbJAAwEVn47Gbkv425P4fEc91vAhzQn8PbIoatbAyOtESpjs/pYDTeC/\n"
29
   "mnJId8gqO90cqyRECEMjk9sQ8iEjWPlik4ayGlUVbeeMu6/pJ9F8IZEgkLZiNDAB\n"
30
   "4anmOFaT7EmqUjI4IlcaqfbbXyDXlvWUYukidEss+CNvPuqbQHBDnpFVvBxdDR2N\n"
31
   "Uj2D5Xd5blcIe2/+1IVRnznjoQ5zvutzb7ThBmMehQKBgQDOITKG0ht2kXLxjVoR\n"
32
   "r/pVpx+f3hs3H7wE0+vrLHoQgkVjpMWXQ47YuZTT9rCOOYNI2cMoH2D27t1j78/B\n"
33
   "9kGYABUVpvQQ+6amqJDI1eYI6e68TPueEDjeALfSCdmPNiI3lZZrCIK9XLpkoy8K\n"
34
   "tGYBRRJ+JJxjj1zPXj9SGshPgwKBgQDFXUtoxY3mCStH3+0b1qxGG9r1L5goHEmd\n"
35
   "Am8WBYDheNpL0VqPNzouhuM/ZWMGyyAs/py6aLATe+qhR1uX5vn7LVZwjCSONZ4j\n"
36
   "7ieEEUh1BHetPI1oI5PxgokRYfVuckotqVseanI/536Er3Yf2FXNQ1/ceVp9WykX\n"
37
   "3mYTKMhQFwKBgQDKakcXpZNaZ5IcKdZcsBZ/rdGcR5sqEnursf9lvRNQytwg8Vkn\n"
38
   "JSxNHlBLpV/TCh8lltHRwJ6TXhUBYij+KzhWbx5FWOErHDOWTMmArqtp7W6GcoJT\n"
39
   "wVJWjxXzp8CApYQMWVSQXpckJL7UvHohZO0WKiHyxTjde5aD++TqV2qEyQKBgBbD\n"
40
   "jvoTpy08K4DLxCZs2Uvw1I1pIuylbpwsdrGciuP2s38BM6fHH+/T4Qwj3osfDKQD\n"
41
   "7gHWJ1Dn/wUBHQBlRLoC3bB3iZPZfVb5lhc2gxv0GvWhQVIcoGi/vJ2DpfJKPmIL\n"
42
   "4ZWdg3X5dm9JaZ98rVDSj5D3ckd5J0E4hp95GbmbAoGBAJJHM4O9lx60tIjw9Sf/\n"
43
   "QmKWyUk0NLnt8DcgRMW7fVxtzPNDy9DBKGIkDdWZ2s+ForICA3C9WSxBC1EOEHGG\n"
44
   "xkg2xKt66CeutGroP6M191mHQrRClt1VbEYzQFX21BCk5kig9i/BURyoTHtFiV+t\n"
45
   "kbf4VLg8Vk9u/R3RU1HsYWhe\n"
46
   "-----END PRIVATE KEY-----\n";
47

48
const char* const fixed_rsa_cert =
49
   "-----BEGIN CERTIFICATE-----\n"
50
   "MIIDUDCCAjgCCQD7pIb1ZsoafjANBgkqhkiG9w0BAQsFADBqMQswCQYDVQQGEwJW\n"
51
   "VDEQMA4GA1UECAwHVmVybW9udDEWMBQGA1UEBwwNVGhlIEludGVybmV0czEUMBIG\n"
52
   "A1UECgwLTWFuZ29zIFIgVXMxGzAZBgNVBAMMEnNlcnZlci5leGFtcGxlLmNvbTAe\n"
53
   "Fw0xNjAxMDYxNzQ3MjNaFw0yNjAxMDMxNzQ3MjNaMGoxCzAJBgNVBAYTAlZUMRAw\n"
54
   "DgYDVQQIDAdWZXJtb250MRYwFAYDVQQHDA1UaGUgSW50ZXJuZXRzMRQwEgYDVQQK\n"
55
   "DAtNYW5nb3MgUiBVczEbMBkGA1UEAwwSc2VydmVyLmV4YW1wbGUuY29tMIIBIjAN\n"
56
   "BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuqqqTEFSe8wiaEp6cYmtMjujOyH\n"
57
   "txRqj3HdA87ngvpFj77h0Pj6T+b3zuqqkWg1SCN+zxV+TVGUJhiv6wJu7KYyB0wj\n"
58
   "IKkmfKTddy1PJtYA8CHbvWpdei1zfc2Yweu7i5RZ9ra7S4tt+ItHJ8nhfCAtHM+7\n"
59
   "YAjszElRAXKiY5HYBq2d1lIDl3nFZtpV1a2JRImksRaeFThPZERXlaxCwo5jbXOI\n"
60
   "UXdcibBfrzmwrb8qhmEBNUHG9DFUkAwRzJIlFZjus7lu7XeXnzv9Tsp7UCRslWvk\n"
61
   "p1m5Eiwsm7WtiezK3hxDaxeRgNCtSi9eNEjUR3lon0TLjULmu6pilzAUxQIDAQAB\n"
62
   "MA0GCSqGSIb3DQEBCwUAA4IBAQA1eZGc/4V7z/E/6eG0hVkzoAZeuTcSP7WqBSx+\n"
63
   "OP2yh0163UYjoa6nehmkKYQQ9PbYPZGzIcl+dBFyYzy6jcp0NdtzpWnTFrjl4rMq\n"
64
   "akcQ1D0LTYjJXVP9G/vF/SvatOFeVTnQmLlLt/a8ZtRUINqejeZZPzH8ifzFW6tu\n"
65
   "mlhTVIEKyPHpxClh5Y3ubw/mZYygekFTqMkTx3FwJxKU8J6rYGZxanWAODUIvCUo\n"
66
   "Fxer1qC5Love3uWl3vXPLEZWZdORnExSRByzz2immBP2vX4zYZoeZRhTQ9ae1TIV\n"
67
   "Dk02a/1AOJZdZReDbgXhlqaUx5pk/rzo4mDzvu5HSCeXmClz\n"
68
   "-----END CERTIFICATE-----\n";
69

70
class Fuzzer_TLS_Server_Creds : public Botan::Credentials_Manager {
71
   public:
72
      Fuzzer_TLS_Server_Creds() {
1,128✔
73
         Botan::DataSource_Memory cert_in(fixed_rsa_cert);
1,128✔
74
         m_rsa_cert = std::make_unique<Botan::X509_Certificate>(cert_in);
1,128✔
75

76
         Botan::DataSource_Memory key_in(fixed_rsa_key);
1,128✔
77
         m_rsa_key.reset(Botan::PKCS8::load_key(key_in).release());
2,256✔
78
      }
2,256✔
79

80
      std::vector<Botan::X509_Certificate> cert_chain(
×
81
         const std::vector<std::string>& algos,
82
         const std::vector<Botan::AlgorithmIdentifier>& /*signature_schemes*/,
83
         const std::string& /*type*/,
84
         const std::string& /*hostname*/) override {
85
         std::vector<Botan::X509_Certificate> v;
×
86

87
         for(const auto& algo : algos) {
×
88
            if(algo == "RSA") {
×
89
               v.push_back(*m_rsa_cert);
×
90
               break;
91
            }
92
         }
93

94
         return v;
×
95
      }
×
96

97
      std::shared_ptr<Botan::Private_Key> private_key_for(const Botan::X509_Certificate& /*cert*/,
×
98
                                                          const std::string& type,
99
                                                          const std::string& /*context*/) override {
100
         if(type == "RSA") {
×
101
            return m_rsa_key;
×
102
         }
103
         return nullptr;
×
104
      }
105

106
      std::string psk_identity_hint(const std::string&, const std::string&) override { return "psk_hint"; }
×
107

108
      std::string psk_identity(const std::string&, const std::string&, const std::string&) override { return "psk_id"; }
×
109

110
      Botan::SymmetricKey psk(const std::string&, const std::string&, const std::string&) override {
×
111
         return Botan::SymmetricKey("AABBCCDDEEFF00112233445566778899");
×
112
      }
113

114
   private:
115
      std::unique_ptr<Botan::X509_Certificate> m_rsa_cert;
116
      std::shared_ptr<Botan::Private_Key> m_rsa_key;
117
};
118

119
class Fuzzer_TLS_Policy : public Botan::TLS::Policy {
2,256✔
120
   public:
121
      // TODO: Enable this once the TLS 1.3 server implementation is ready.
122
      //       Maybe even build individual fuzz targets for different versions.
123
      bool allow_tls13() const override { return false; }
1,107✔
124

125
      std::vector<uint16_t> ciphersuite_list(Botan::TLS::Protocol_Version) const override {
×
126
         std::vector<uint16_t> ciphersuites;
×
127

128
         for(auto&& suite : Botan::TLS::Ciphersuite::all_known_ciphersuites()) {
×
129
            if(suite.valid()) {
×
130
               ciphersuites.push_back(suite.ciphersuite_code());
×
131
            }
132
         }
133

134
         return ciphersuites;
×
135
      }
×
136
};
137

138
class Fuzzer_TLS_Server_Callbacks : public Botan::TLS::Callbacks {
2,256✔
139
   public:
140
      void tls_emit_data(std::span<const uint8_t>) override {
×
141
         // discard
142
      }
×
143

144
      void tls_record_received(uint64_t, std::span<const uint8_t>) override {
×
145
         // ignore peer data
146
      }
×
147

148
      void tls_alert(Botan::TLS::Alert) override {
×
149
         // ignore alert
150
      }
×
151

152
      std::string tls_server_choose_app_protocol(const std::vector<std::string>& client_protos) override {
×
153
         if(client_protos.size() > 1) {
×
154
            return client_protos[0];
×
155
         } else {
156
            return "fuzzy";
×
157
         }
158
      }
159

160
      void tls_verify_cert_chain(const std::vector<Botan::X509_Certificate>& cert_chain,
×
161
                                 const std::vector<std::optional<Botan::OCSP::Response>>& ocsp_responses,
162
                                 const std::vector<Botan::Certificate_Store*>& trusted_roots,
163
                                 Botan::Usage_Type usage,
164
                                 std::string_view hostname,
165
                                 const Botan::TLS::Policy& policy) override {
166
         try {
×
167
            // try to validate to exercise those code paths
168
            Botan::TLS::Callbacks::tls_verify_cert_chain(
×
169
               cert_chain, ocsp_responses, trusted_roots, usage, hostname, policy);
170
         } catch(...) {
×
171
            // ignore validation result
172
         }
×
173
      }
×
174
};
175

176
}  // namespace
177

178
void fuzz(const uint8_t in[], size_t len) {
1,131✔
179
   if(len <= 1) {
1,131✔
180
      return;
3✔
181
   }
182

183
   auto session_manager = std::make_shared<Botan::TLS::Session_Manager_Noop>();
1,128✔
184
   auto policy = std::make_shared<Fuzzer_TLS_Policy>();
1,128✔
185
   Botan::TLS::Server_Information info("server.name", 443);
1,128✔
186
   auto creds = std::make_shared<Fuzzer_TLS_Server_Creds>();
1,128✔
187
   auto callbacks = std::make_shared<Fuzzer_TLS_Server_Callbacks>();
1,128✔
188

189
   const bool is_datagram = in[0] & 1;
1,128✔
190

191
   Botan::TLS::Server server(callbacks, session_manager, creds, policy, fuzzer_rng_as_shared(), is_datagram);
6,768✔
192

193
   try {
1,128✔
194
      server.received_data(in + 1, len - 1);
1,128✔
195
   } catch(std::exception& e) {}
1,105✔
196
}
5,640✔
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc