fuzz/fuzz_libinjection.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

#include "ndpi_api.h"
#include "../src/lib/third_party/include/libinjection.h"
#include "../src/lib/third_party/include/libinjection_xss.h"
#include "../src/lib/third_party/include/libinjection_sqli.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  char *query;
  char fingerprint[8];

  /* No memory allocations involved */

  /* Libinjection: it wants null-terminated string */

  query = malloc(size + 1);
  memcpy(query, data, size);
  query[size] = '\0';

  libinjection_sqli(query, strlen(query), fingerprint);

  libinjection_xss(query, strlen(query));

  free(query);

  return 0;
}