aboutsummaryrefslogtreecommitdiff
path: root/fuzz
diff options
context:
space:
mode:
authorNardi Ivan <nardi.ivan@gmail.com>2024-06-25 12:16:09 +0200
committerIvan Nardi <12729895+IvanNardi@users.noreply.github.com>2024-06-25 16:39:45 +0200
commit556f892a56d57e1afadb91fd5a12078cb3e2e5dc (patch)
tree20300d0fc76394bc9dd3a4d6b0d472751c9fb3a5 /fuzz
parentf44832cc51400f7ede9343cb1847f4c242c5ddc9 (diff)
wireshark: lua: export some metadata
Export some metadata (for the moment, SNI and TLS fingerprints) to Wireshark/tshark via extcap. Note that: * metadata are exported only once per flow * metadata are exported (all together) when nDPI stopped processing the flow Still room for a lot of improvements! In particular: * we need to add some boundary checks (if we are going to export other attributes) * we should try to have a variable length trailer
Diffstat (limited to 'fuzz')
2 files changed, 4 insertions, 2 deletions
diff --git a/fuzz/fuzz_ndpi_reader.c b/fuzz/fuzz_ndpi_reader.c
index 80ed16886..41e7be063 100644
--- a/fuzz/fuzz_ndpi_reader.c
+++ b/fuzz/fuzz_ndpi_reader.c
@@ -126,9 +126,10 @@ int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
if(packet_checked) {
ndpi_risk flow_risk;
+ struct ndpi_flow_info *flow = NULL; /* unused */
memcpy(packet_checked, pkt, header->caplen);
- ndpi_workflow_process_packet(workflow, header, packet_checked, &flow_risk);
+ ndpi_workflow_process_packet(workflow, header, packet_checked, &flow_risk, &flow);
free(packet_checked);
}
diff --git a/fuzz/fuzz_readerutils_workflow.cpp b/fuzz/fuzz_readerutils_workflow.cpp
index 9087a72c1..3517003b6 100644
--- a/fuzz/fuzz_readerutils_workflow.cpp
+++ b/fuzz/fuzz_readerutils_workflow.cpp
@@ -23,6 +23,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
ndpi_serialization_format serialization_format;
NDPI_PROTOCOL_BITMASK enabled_bitmask;
ndpi_risk flow_risk;
+ struct ndpi_flow_info *flow = NULL; /* unused */
const u_char *pkt;
struct pcap_pkthdr *header;
int r, rc;
@@ -95,7 +96,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
header = NULL;
r = pcap_next_ex(pcap_handle, &header, &pkt);
while (r > 0) {
- ndpi_workflow_process_packet(w, header, pkt, &flow_risk);
+ ndpi_workflow_process_packet(w, header, pkt, &flow_risk, &flow);
r = pcap_next_ex(pcap_handle, &header, &pkt);
}
}
Powered by cgit, Themed by Ted Yin.