mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-21 06:09:35 +08:00
Code Issues Packages Projects Releases Wiki Activity
f471061721
openssl/fuzz/build.info

282 lines
8.6 KiB
Plaintext
Raw Normal View History

Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
{- use File::Spec::Functions;
our $ex_inc = $withargs{fuzzer_include} &&
(file_name_is_absolute($withargs{fuzzer_include}) ?
$withargs{fuzzer_include} : catdir(updir(), $withargs{fuzzer_include}));
our $ex_lib = $withargs{fuzzer_lib} &&
(file_name_is_absolute($withargs{fuzzer_lib}) ?
$withargs{fuzzer_lib} : catfile(updir(), $withargs{fuzzer_lib}));
""
-}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
IF[{- !$disabled{"fuzz-afl"} || !$disabled{"fuzz-libfuzzer"} -}]
Update X509 fuzzer to verify a chain It add supports for verifying that it's been signed by a CA, and checks the CRL and OCSP status Can find CVE-2022-4203 and CVE-2023-0286 Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20243)
2022-12-19 03:54:15 +08:00
PROGRAMS{noinst}=asn1 asn1parse bignum bndiv client conf crl server smime
fuzz: Add attribute certificate fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15857)
2023-04-05 02:52:56 +08:00
PROGRAMS{noinst}=punycode pem decoder hashtable acert
Add fuzz test for v3name v3name_fuzzer build modifications create 99-test_fuzz_v3name_fuzzer.t test corpus for cve-2023-0286 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20274)
2023-02-13 10:49:23 +08:00
PROGRAMS{noinst}=v3name
Add provider fuzzer Test recipe 99-test_fuzz_provider.t added. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22964)
2023-10-03 19:22:02 +08:00
PROGRAMS{noinst}=provider
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/ Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11386)
2020-03-24 17:33:16 +08:00
IF[{- !$disabled{"cmp"} -}]
PROGRAMS{noinst}=cmp
ENDIF
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
IF[{- !$disabled{"cms"} -}]
Build: Change all _NO_INST to use attributes instead. This means that all PROGRAMS_NO_INST, LIBS_NO_INST, ENGINES_NO_INST and SCRIPTS_NO_INST are changed to be PROGRAM, LIBS, ENGINES and SCRIPTS with the associated attribute 'noinst'. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7581)
2018-11-07 18:02:06 +08:00
PROGRAMS{noinst}=cms
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
ENDIF
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Fix no-ct Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-22 22:49:03 +08:00
IF[{- !$disabled{"ct"} -}]
Build: Change all _NO_INST to use attributes instead. This means that all PROGRAMS_NO_INST, LIBS_NO_INST, ENGINES_NO_INST and SCRIPTS_NO_INST are changed to be PROGRAM, LIBS, ENGINES and SCRIPTS with the associated attribute 'noinst'. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7581)
2018-11-07 18:02:06 +08:00
PROGRAMS{noinst}=ct
Fix no-ct Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-22 22:49:03 +08:00
ENDIF
Update X509 fuzzer to verify a chain It add supports for verifying that it's been signed by a CA, and checks the CRL and OCSP status Can find CVE-2022-4203 and CVE-2023-0286 Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20243)
2022-12-19 03:54:15 +08:00
IF[{- !$disabled{"ocsp"} -}]
PROGRAMS{noinst}=x509
ENDIF
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
IF[{- !$disabled{"quic"} -}]
QUIC RCIDM: Add fuzzer Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23022)
2023-11-07 23:24:17 +08:00
PROGRAMS{noinst}=quic-client quic-srtm quic-lcidm quic-rcidm
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
ENDIF
Add fuzzing for DTLS Update the fuzz corpora submodule with the DTLS fuzz corpus. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23585)
2024-02-14 17:09:55 +08:00
IF[{- !$disabled{"dtls"} -}]
PROGRAMS{noinst}=dtlsclient dtlsserver
ENDIF
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[asn1]=asn1.c driver.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[asn1]=../include {- $ex_inc -}
ASN1 fuzzer: Use d2i_TYPE / i2d_TYPE functions Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> GH: #4648
2017-11-02 01:37:04 +08:00
DEPEND[asn1]=../libcrypto ../libssl {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[asn1parse]=asn1parse.c driver.c
INCLUDE[asn1parse]=../include {- $ex_inc -}
DEPEND[asn1parse]=../libcrypto {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[bignum]=bignum.c driver.c
INCLUDE[bignum]=../include {- $ex_inc -}
DEPEND[bignum]=../libcrypto {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[bndiv]=bndiv.c driver.c
INCLUDE[bndiv]=../include {- $ex_inc -}
DEPEND[bndiv]=../libcrypto {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[client]=client.c driver.c fuzz_rand.c
And client fuzzer Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #2041
2016-12-08 06:12:04 +08:00
INCLUDE[client]=../include {- $ex_inc -}
DEPEND[client]=../libcrypto ../libssl {- $ex_lib -}
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[cmp]=cmp.c driver.c fuzz_rand.c
Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/ Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11386)
2020-03-24 17:33:16 +08:00
INCLUDE[cmp]=../include {- $ex_inc -}
DEPEND[cmp]=../libcrypto {- $ex_lib -}
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[cms]=cms.c driver.c
INCLUDE[cms]=../include {- $ex_inc -}
DEPEND[cms]=../libcrypto {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[conf]=conf.c driver.c
INCLUDE[conf]=../include {- $ex_inc -}
DEPEND[conf]=../libcrypto {- $ex_lib -}
Re-add x509 and crl fuzzer Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1276
2016-07-01 22:42:15 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[crl]=crl.c driver.c
INCLUDE[crl]=../include {- $ex_inc -}
DEPEND[crl]=../libcrypto {- $ex_lib -}
Run the fuzzing corpora as tests. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-04 23:10:49 +08:00
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[ct]=ct.c driver.c
INCLUDE[ct]=../include {- $ex_inc -}
DEPEND[ct]=../libcrypto {- $ex_lib -}
Re-add x509 and crl fuzzer Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1276
2016-07-01 22:42:15 +08:00
Add fuzzing for DTLS Update the fuzz corpora submodule with the DTLS fuzz corpus. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23585)
2024-02-14 17:09:55 +08:00
SOURCE[dtlsclient]=dtlsclient.c driver.c fuzz_rand.c
INCLUDE[dtlsclient]=../include {- $ex_inc -}
DEPEND[dtlsclient]=../libcrypto ../libssl {- $ex_lib -}
SOURCE[dtlsserver]=dtlsserver.c driver.c fuzz_rand.c
INCLUDE[dtlsserver]=../include {- $ex_inc -}
DEPEND[dtlsserver]=../libcrypto ../libssl {- $ex_lib -}
Add PEM fuzzer This fuzzer can find CVE-2022-4450 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20242)
2022-12-14 05:10:47 +08:00
SOURCE[pem]=pem.c driver.c
INCLUDE[pem]=../include {- $ex_inc -}
DEPEND[pem]=../libcrypto.a {- $ex_lib -}
Add decoder fuzzer This found CVE-2023-0217 Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20269)
2023-01-12 04:14:35 +08:00
SOURCE[decoder]=decoder.c driver.c fuzz_rand.c
INCLUDE[decoder]=../include {- $ex_inc -}
DEPEND[decoder]=../libcrypto {- $ex_lib -}
Adding hashtable fuzzer Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23671)
2024-02-20 19:12:59 +08:00
SOURCE[hashtable]=hashtable.c driver.c
INCLUDE[hashtable]=../include {- $ex_inc -}
DEPEND[hashtable]=../libcrypto {- $ex_lib -}
fuzz: Add attribute certificate fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15857)
2023-04-05 02:52:56 +08:00
SOURCE[acert]=acert.c driver.c
INCLUDE[acert]=../include {- $ex_inc -}
DEPEND[acert]=../libcrypto {- $ex_lib -}
fuzz: add punycode decoder fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19591)
2022-11-04 05:43:38 +08:00
SOURCE[punycode]=punycode.c driver.c
INCLUDE[punycode]=../include {- $ex_inc -}
DEPEND[punycode]=../libcrypto.a {- $ex_lib -}
Added a fuzzer for SMIME Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20332)
2023-02-19 12:43:41 +08:00
SOURCE[smime]=smime.c driver.c
INCLUDE[smime]=../include {- $ex_inc -}
DEPEND[smime]=../libcrypto ../libssl {- $ex_lib -}
Add fuzz test for v3name v3name_fuzzer build modifications create 99-test_fuzz_v3name_fuzzer.t test corpus for cve-2023-0286 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20274)
2023-02-13 10:49:23 +08:00
SOURCE[v3name]=v3name.c driver.c
INCLUDE[v3name]=../include {- $ex_inc -}
DEPEND[v3name]=../libcrypto.a {- $ex_lib -}
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
SOURCE[quic-client]=quic-client.c driver.c fuzz_rand.c
INCLUDE[quic-client]=../include {- $ex_inc -}
Teach the quic-client fuzzer about time We allow the fuzzer to influence the time between different packets using the fake time capability. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2023-10-16 20:10:33 +08:00
DEPEND[quic-client]=../libcrypto.a ../libssl.a {- $ex_lib -}
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
QUIC SRTM: Add fuzzer for SRTM Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22612)
2023-11-03 19:56:29 +08:00
SOURCE[quic-srtm]=quic-srtm.c driver.c fuzz_rand.c
INCLUDE[quic-srtm]=../include {- $ex_inc -}
DEPEND[quic-srtm]=../libcrypto.a ../libssl.a {- $ex_lib -}
QUIC LCIDM: Add fuzzer Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22673)
2023-11-04 01:16:23 +08:00
SOURCE[quic-lcidm]=quic-lcidm.c driver.c fuzz_rand.c
INCLUDE[quic-lcidm]=../include {- $ex_inc -}
DEPEND[quic-lcidm]=../libcrypto.a ../libssl.a {- $ex_lib -}
QUIC RCIDM: Add fuzzer Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23022)
2023-11-07 23:24:17 +08:00
SOURCE[quic-rcidm]=quic-rcidm.c driver.c fuzz_rand.c
INCLUDE[quic-rcidm]=../include {- $ex_inc -}
DEPEND[quic-rcidm]=../libcrypto.a ../libssl.a {- $ex_lib -}
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[server]=server.c driver.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[server]=../include {- $ex_inc -}
DEPEND[server]=../libcrypto ../libssl {- $ex_lib -}
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[x509]=x509.c driver.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[x509]=../include {- $ex_inc -}
DEPEND[x509]=../libcrypto {- $ex_lib -}
Add provider fuzzer Test recipe 99-test_fuzz_provider.t added. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22964)
2023-10-03 19:22:02 +08:00
SOURCE[provider]=provider.c driver.c
INCLUDE[provider]=../include {- $ex_inc -}
DEPEND[provider]=../libcrypto {- $ex_lib -}
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
ENDIF
IF[{- !$disabled{tests} -}]
Update X509 fuzzer to verify a chain It add supports for verifying that it's been signed by a CA, and checks the CRL and OCSP status Can find CVE-2022-4203 and CVE-2023-0286 Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20243)
2022-12-19 03:54:15 +08:00
PROGRAMS{noinst}=asn1-test asn1parse-test bignum-test bndiv-test client-test conf-test crl-test server-test smime-test
fuzz: Add attribute certificate fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15857)
2023-04-05 02:52:56 +08:00
PROGRAMS{noinst}=punycode-test pem-test decoder-test hashtable-test acert-test
Add fuzz test for v3name v3name_fuzzer build modifications create 99-test_fuzz_v3name_fuzzer.t test corpus for cve-2023-0286 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20274)
2023-02-13 10:49:23 +08:00
PROGRAMS{noinst}=v3name-test
Add provider fuzzer Test recipe 99-test_fuzz_provider.t added. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22964)
2023-10-03 19:22:02 +08:00
PROGRAMS{noinst}=provider-test
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/ Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11386)
2020-03-24 17:33:16 +08:00
IF[{- !$disabled{"cmp"} -}]
PROGRAMS{noinst}=cmp-test
ENDIF
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
IF[{- !$disabled{"cms"} -}]
Build: Change all _NO_INST to use attributes instead. This means that all PROGRAMS_NO_INST, LIBS_NO_INST, ENGINES_NO_INST and SCRIPTS_NO_INST are changed to be PROGRAM, LIBS, ENGINES and SCRIPTS with the associated attribute 'noinst'. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7581)
2018-11-07 18:02:06 +08:00
PROGRAMS{noinst}=cms-test
Fix building with no-cms The new fuzzing code broke no-cms Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-19 03:59:30 +08:00
ENDIF
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
Fix no-ct Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-22 22:49:03 +08:00
IF[{- !$disabled{"ct"} -}]
Build: Change all _NO_INST to use attributes instead. This means that all PROGRAMS_NO_INST, LIBS_NO_INST, ENGINES_NO_INST and SCRIPTS_NO_INST are changed to be PROGRAM, LIBS, ENGINES and SCRIPTS with the associated attribute 'noinst'. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7581)
2018-11-07 18:02:06 +08:00
PROGRAMS{noinst}=ct-test
Fix no-ct Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-22 22:49:03 +08:00
ENDIF
Update X509 fuzzer to verify a chain It add supports for verifying that it's been signed by a CA, and checks the CRL and OCSP status Can find CVE-2022-4203 and CVE-2023-0286 Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20243)
2022-12-19 03:54:15 +08:00
IF[{- !$disabled{"ocsp"} -}]
PROGRAMS{noinst}=x509-test
ENDIF
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
IF[{- !$disabled{"quic"} -}]
QUIC LCIDM: Add fuzzer Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22673)
2023-11-04 01:16:23 +08:00
PROGRAMS{noinst}=quic-client-test quic-srtm-test quic-lcidm-test
QUIC RCIDM: Add fuzzer Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23022)
2023-11-07 23:24:17 +08:00
PROGRAMS{noinst}=quic-rcidm-test
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
ENDIF
Add fuzzing for DTLS Update the fuzz corpora submodule with the DTLS fuzz corpus. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23585)
2024-02-14 17:09:55 +08:00
IF[{- !$disabled{"dtls"} -}]
PROGRAMS{noinst}=dtlsclient-test dtlsserver-test
ENDIF
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[asn1-test]=asn1.c test-corpus.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[asn1-test]=../include
ASN1 fuzzer: Use d2i_TYPE / i2d_TYPE functions Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> GH: #4648
2017-11-02 01:37:04 +08:00
DEPEND[asn1-test]=../libcrypto ../libssl
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[asn1parse-test]=asn1parse.c test-corpus.c
INCLUDE[asn1parse-test]=../include
DEPEND[asn1parse-test]=../libcrypto
SOURCE[bignum-test]=bignum.c test-corpus.c
INCLUDE[bignum-test]=../include
DEPEND[bignum-test]=../libcrypto
SOURCE[bndiv-test]=bndiv.c test-corpus.c
INCLUDE[bndiv-test]=../include
DEPEND[bndiv-test]=../libcrypto
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[client-test]=client.c test-corpus.c fuzz_rand.c
And client fuzzer Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #2041
2016-12-08 06:12:04 +08:00
INCLUDE[client-test]=../include
DEPEND[client-test]=../libcrypto ../libssl
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[cmp-test]=cmp.c test-corpus.c fuzz_rand.c
Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/ Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11386)
2020-03-24 17:33:16 +08:00
INCLUDE[cmp-test]=../include
DEPEND[cmp-test]=../libcrypto.a
# referring to static lib allows using non-exported functions
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
SOURCE[cms-test]=cms.c test-corpus.c
INCLUDE[cms-test]=../include
DEPEND[cms-test]=../libcrypto
SOURCE[conf-test]=conf.c test-corpus.c
INCLUDE[conf-test]=../include
DEPEND[conf-test]=../libcrypto
SOURCE[crl-test]=crl.c test-corpus.c
INCLUDE[crl-test]=../include
DEPEND[crl-test]=../libcrypto
SOURCE[ct-test]=ct.c test-corpus.c
INCLUDE[ct-test]=../include
DEPEND[ct-test]=../libcrypto
Add fuzzing for DTLS Update the fuzz corpora submodule with the DTLS fuzz corpus. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23585)
2024-02-14 17:09:55 +08:00
SOURCE[dtlsclient-test]=dtlsclient.c test-corpus.c fuzz_rand.c
INCLUDE[dtlsclient-test]=../include
DEPEND[dtlsclient-test]=../libcrypto ../libssl
SOURCE[dtlsserver-test]=dtlsserver.c test-corpus.c fuzz_rand.c
INCLUDE[dtlsserver-test]=../include
DEPEND[dtlsserver-test]=../libcrypto ../libssl
Add PEM fuzzer This fuzzer can find CVE-2022-4450 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20242)
2022-12-14 05:10:47 +08:00
SOURCE[pem-test]=pem.c test-corpus.c
INCLUDE[pem-test]=../include
DEPEND[pem-test]=../libcrypto.a
Add decoder fuzzer This found CVE-2023-0217 Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20269)
2023-01-12 04:14:35 +08:00
SOURCE[decoder-test]=decoder.c test-corpus.c fuzz_rand.c
INCLUDE[decoder-test]=../include
DEPEND[decoder-test]=../libcrypto
Adding hashtable fuzzer Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23671)
2024-02-20 19:12:59 +08:00
SOURCE[hashtable-test]=hashtable.c test-corpus.c fuzz_rand.c
INCLUDE[hashtable-test]=../include
DEPEND[hashtable-test]=../libcrypto.a
fuzz: Add attribute certificate fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15857)
2023-04-05 02:52:56 +08:00
SOURCE[acert-test]=acert.c test-corpus.c
INCLUDE[acert-test]=../include
DEPEND[acert-test]=../libcrypto
fuzz: add punycode decoder fuzz test Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19591)
2022-11-04 05:43:38 +08:00
SOURCE[punycode-test]=punycode.c test-corpus.c
INCLUDE[punycode-test]=../include
DEPEND[punycode-test]=../libcrypto.a
Added a fuzzer for SMIME Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20332)
2023-02-19 12:43:41 +08:00
SOURCE[smime-test]=smime.c test-corpus.c
INCLUDE[smime-test]=../include
DEPEND[smime-test]=../libcrypto ../libssl
Add fuzz test for v3name v3name_fuzzer build modifications create 99-test_fuzz_v3name_fuzzer.t test corpus for cve-2023-0286 Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20274)
2023-02-13 10:49:23 +08:00
SOURCE[v3name-test]=v3name.c test-corpus.c
INCLUDE[v3name-test]=../include
DEPEND[v3name-test]=../libcrypto.a
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
SOURCE[quic-client-test]=quic-client.c test-corpus.c fuzz_rand.c
INCLUDE[quic-client-test]=../include
Teach the quic-client fuzzer about time We allow the fuzzer to influence the time between different packets using the fake time capability. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2023-10-16 20:10:33 +08:00
DEPEND[quic-client-test]=../libcrypto.a ../libssl.a
Add quic client fuzzer. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22368)
2022-11-23 21:24:13 +08:00
QUIC SRTM: Add fuzzer for SRTM Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22612)
2023-11-03 19:56:29 +08:00
SOURCE[quic-srtm-test]=quic-srtm.c test-corpus.c fuzz_rand.c
INCLUDE[quic-srtm-test]=../include
DEPEND[quic-srtm-test]=../libcrypto.a ../libssl.a
QUIC LCIDM: Add fuzzer Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22673)
2023-11-04 01:16:23 +08:00
SOURCE[quic-lcidm-test]=quic-lcidm.c test-corpus.c fuzz_rand.c
INCLUDE[quic-lcidm-test]=../include
DEPEND[quic-lcidm-test]=../libcrypto.a ../libssl.a
QUIC RCIDM: Add fuzzer Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23022)
2023-11-07 23:24:17 +08:00
SOURCE[quic-rcidm-test]=quic-rcidm.c test-corpus.c fuzz_rand.c
INCLUDE[quic-rcidm-test]=../include
DEPEND[quic-rcidm-test]=../libcrypto.a ../libssl.a
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[server-test]=server.c test-corpus.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[server-test]=../include
DEPEND[server-test]=../libcrypto ../libssl
RAND_METHOD deprecation: fuzzer Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13652)
2020-12-10 10:04:58 +08:00
SOURCE[x509-test]=x509.c test-corpus.c fuzz_rand.c
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
INCLUDE[x509-test]=../include
DEPEND[x509-test]=../libcrypto
Add provider fuzzer Test recipe 99-test_fuzz_provider.t added. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22964)
2023-10-03 19:22:02 +08:00
SOURCE[provider-test]=provider.c test-corpus.c
INCLUDE[provider-test]=../include
DEPEND[provider-test]=../libcrypto
Make fuzzer and fuzz tester builds less magic Instead of having fuzz/build.info.fuzz magically and conditionally included along with the other build.info files, incorporate it in fuzz/build.info and add the conditions there instead. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-07-09 00:13:17 +08:00
ENDIF
Reference in New Issue Copy Permalink