tree 4cbb7b29211f6d74ff039e825186091ad0518c23
parent c5bdc537bce51c222c05d215b69bf4eb5948c665
author Vincent Palatin <vpalatin@chromium.org> 1617882548 +0200
committer Commit Bot <commit-bot@chromium.org> 1619025189 +0000

modemfwd: fix check for invalid firmware manifest v2

Clusterfuzz has detected a corner case where an invalid firmware manifest
containing no main firmware but an OEM firmware would crash the parser.
Add the missing check for this case.

fix another error case for Clusterfuzz, passing absolute file paths in the
manifest would trigger an assert in Append().

BUG=chromium:1196873
BUG=b:184630331
TEST=unit-tests
TEST=verify that the clusterfuzz repro fails without the patch and pass
with it using the following command:
'cros_fuzz --board=zork reproduce --fuzzer firmware_manifest_v2_fuzzer --testcase clusterfuzz-testcase-minimized-firmware_manifest_v2_fuzzer-5960464740450304 --package modemfwd --build-type asan'
TEST=run /usr/libexec/fuzzers/firmware_manifest_v2_fuzzer

Change-Id: I9c4247ce9306eace01c2ee86dbbed3e31f803bbc
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2814678
Tested-by: Vincent Palatin <vpalatin@chromium.org>
Reviewed-by: Andrew Lassalle <andrewlassalle@chromium.org>
Commit-Queue: Vincent Palatin <vpalatin@chromium.org>
(cherry picked from commit 2b94342448d24074932fc0dca86f4c88e3210b11)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/2843804
Reviewed-by: Vincent Palatin <vpalatin@chromium.org>