Skip to content

Implementation of two more fuzzers

Jakub Jelen requested to merge jjelen/libcacard:fuzzers into master

After reviewing the coverage of existing fuzzer, I identified two more places, which might make sense to fuzz and which might identify some issues.

The first one is SimpleTLV parser, which is not used in the current fuzzer and is pretty straightforward.

The other is the options parser, which has opportunity to have some issues as it is not tested at all. The issue is that it leaks data the way how it is written now (the options structure is private, on failure, no cleanup is made). To make the fuzzer working, we need to improve the parsing a bit by adding cleanup phase, avoid overwriting duplicate items in configuration and few more things as in the attached commits.

Merge request reports