open62541/tests/fuzz/fuzz_src_ua_util.cc

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
 *
 *    Copyright 2019 (c) fortiss (Author: Stefan Profanter)
 */


#include "custom_memory_manager.h"

#include <open62541/util.h>


static int tortureParseEndpointUrl(const uint8_t *data, size_t size) {
    const UA_String endpointUrl = {
        size, (UA_Byte* )(void*)data
    };

    UA_String hostname;
    UA_UInt16 port;
    UA_String path;
    UA_parseEndpointUrl(&endpointUrl, &hostname, &port, &path);
    return 0;
}

static int tortureParseEndpointUrlEthernet(const uint8_t *data, size_t size) {
    const UA_String endpointUrl = {
        size, (UA_Byte* )(void*)data
    };

    UA_String target;
    UA_UInt16 vid;
    UA_Byte prid;
    UA_parseEndpointUrlEthernet(&endpointUrl, &target, &vid, &prid);
    return 0;
}

/*
** Main entry point.  The fuzzer invokes this function with each
** fuzzed input.
*/
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {

    if (!UA_memoryManager_setLimitFromLast4Bytes(data, size))
        return 0;
    size -= 4;

    if (size == 0)
        return 0;

    // use first byte to decide which function should be fuzzed

    const uint8_t select = data[0];

    const uint8_t *newData = &data[1];
    size_t  newSize = size-1;

    switch(select) {
        case 0:
            return tortureParseEndpointUrl(newData, newSize);
        case 1:
            return tortureParseEndpointUrlEthernet(newData, newSize);
        default:
            return 0;
    }

}