[Opensc-commits] [OpenSC/OpenSC] e58463: fuzzing: Build test programs for fuzz targets when...

[Veronika H. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: e5846333f8e915c68f05ccf0cdb1f74752af736d
      https://github.com/OpenSC/OpenSC/commit/e5846333f8e915c68f05ccf0cdb1f74752af736d
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/tests/fuzzing/Makefile.am
    A src/tests/fuzzing/fuzzer.c

  Log Message:
  -----------
  fuzzing: Build test programs for fuzz targets when fuzzing is not enabled

For testing purposes, fuzzers take files as input which feed
LLVMFuzzerTestOneInput function.


  Commit: 9cfd23062bc19366b8b4605485d71d898a2f7f91
      https://github.com/OpenSC/OpenSC/commit/9cfd23062bc19366b8b4605485d71d898a2f7f91
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M configure.ac
    M src/tests/fuzzing/fuzz_asn1_print.c

  Log Message:
  -----------
  fuzzing: Define FUZZING_ENABLED for closing stdout while fuzzing

In case that called function print out some data


  Commit: c57e8671ef52beffa7cea5e1cac39a2a5d726e8a
      https://github.com/OpenSC/OpenSC/commit/c57e8671ef52beffa7cea5e1cac39a2a5d726e8a
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/tests/fuzzing/fuzz_pkcs15_reader.c

  Log Message:
  -----------
  fuzz_pkcs15_reader.c: Fix type


  Commit: 5a46bde46876239147927f144b4a53ef5d5f4051
      https://github.com/OpenSC/OpenSC/commit/5a46bde46876239147927f144b4a53ef5d5f4051
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/tests/fuzzing/Makefile.am
    A src/tests/fuzzing/fuzz_scconf_parse_string.c

  Log Message:
  -----------
  fuzzing: Add fuzzer for scconf_parse_string function


  Commit: 9a4cc393be025cfba0c02101aecafed97d397daf
      https://github.com/OpenSC/OpenSC/commit/9a4cc393be025cfba0c02101aecafed97d397daf
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    A src/tests/fuzzing/corpus/fuzz_scconf_parse_string/7fa282cd0203fdc8966be091e48584fe94e3f272
    A src/tests/fuzzing/corpus/fuzz_scconf_parse_string/fa7e8cb717af33932718d96a3c785268311d9c6f

  Log Message:
  -----------
  fuzzing: Add corpus for fuzz_scconf_parse_string.c


  Commit: 74a63d22271d174409856d5083418911eb5e61ff
      https://github.com/OpenSC/OpenSC/commit/74a63d22271d174409856d5083418911eb5e61ff
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M configure.ac

  Log Message:
  -----------
  fuzzing: Fix flags for enabling fuzzing


  Commit: a943155d99053efdef0cc8e531aa6ac272c0b704
      https://github.com/OpenSC/OpenSC/commit/a943155d99053efdef0cc8e531aa6ac272c0b704
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    A src/tests/fuzzing/corpus/fuzz_scconf_parse_string/497025125e0dfab0b9e16155ce16d6e25ec8ec6d
    R src/tests/fuzzing/corpus/fuzz_scconf_parse_string/7fa282cd0203fdc8966be091e48584fe94e3f272
    M src/tests/fuzzing/fuzz_scconf_parse_string.c

  Log Message:
  -----------
  fuzz_scconf_parse_string: Fix buffer ending and max input size


  Commit: 1dceff47dda034b3039d1304191b7c707247a6de
      https://github.com/OpenSC/OpenSC/commit/1dceff47dda034b3039d1304191b7c707247a6de
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/scconf/sclex.c

  Log Message:
  -----------
  scconf: Fix check for buffer size

buf_addch() store values on bp->bufcur and bp->bufcur + 1
but check size of the buffer only for bp->bufcur.


  Commit: 2e022aeaa1e7b504e867d745d7d52696d4ec7c84
      https://github.com/OpenSC/OpenSC/commit/2e022aeaa1e7b504e867d745d7d52696d4ec7c84
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/scconf/parse.c

  Log Message:
  -----------
  scconf: Avoid adding list into non-list item

Issue found by calling scconf_string_parse()
with "name =\n\n\nvalue,value;" as an input string.

scconf_parse_token() interprets more newline characters as item
with type SCCONF_ITEM_TYPE_COMMENT. After that when parsing
TOKEN_TYPE_STRING, if parser->state is STATE_VALUE,
scconf_list_add() adds list into that item.
During freeing scconf_context structure, above described
item is freed as SCCONF_ITEM_TYPE_COMMENT and created list
causes memory leak.
To fix this, scconf_parse_token() checks type of item before
adding into list.

When parsing is done, scconf_parse_reset_state() frees values
in parser->name and parser->key.


  Commit: 89f86239e64b63bbd6c45f891d6079a242287921
      https://github.com/OpenSC/OpenSC/commit/89f86239e64b63bbd6c45f891d6079a242287921
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/tests/fuzzing/fuzzer.c

  Log Message:
  -----------
  fuzzing: fix description of fuzzer.c file


  Commit: 9f4eae63aea7c5c0a55ceeb2450de5b9620e640e
      https://github.com/OpenSC/OpenSC/commit/9f4eae63aea7c5c0a55ceeb2450de5b9620e640e
  Author: Veronika Hanulikova <vha...@re...>
  Date:   2021-11-03 (Wed, 03 Nov 2021)

  Changed paths:
    M src/tests/fuzzing/fuzz_scconf_parse_string.c

  Log Message:
  -----------
  fuzz_scconf_parse_string: Use malloc for string buffer


Compare: https://github.com/OpenSC/OpenSC/compare/cc024a33b901...9f4eae63aea7