patchpanel/ndproxy_fuzzer.cc

// Copyright 2019 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "patchpanel/ndproxy.h"

#include <base/logging.h>
#include <fuzzer/FuzzedDataProvider.h>

namespace patchpanel {

namespace {

constexpr MacAddress guest_if_mac({0xd2, 0x47, 0xf7, 0xc5, 0x9e, 0x53});

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  // Turn off logging.
  logging::SetMinLogLevel(logging::LOGGING_FATAL);

  FuzzedDataProvider provider(data, size);
  size_t nd_hdr_len = provider.ConsumeIntegralInRange<size_t>(0, size);
  uint8_t opt_type = provider.ConsumeIntegral<uint8_t>();
  uint8_t* buffer = new uint8_t[size];

  NDProxy ndproxy;
  ndproxy.Init();
  ndproxy.TranslateNDPacket(data, size, guest_if_mac, nullptr, nullptr, buffer);

  memcpy(buffer, data, size);
  const nd_opt_prefix_info* prefix_info =
      NDProxy::GetPrefixInfoOption(buffer, size);
  // Just to consume GetPrefixInfoOption() output
  if (prefix_info != nullptr)
    buffer[0] = prefix_info->nd_opt_pi_prefix_len;

  NDProxy::ReplaceMacInIcmpOption(buffer, size, nd_hdr_len, opt_type,
                                  guest_if_mac);

  delete[] buffer;

  return 0;
}

}  // namespace
}  // namespace patchpanel