libcoap icon indicating copy to clipboard operation
libcoap copied to clipboard

How to fuzz coap_read()

Open bshastry opened this issue 7 years ago • 1 comments

Hi,

It seems to me that coap_read() is an interesting API to fuzz because it processes network data. How can I go about writing a test case to fuzz this API. The main issue I see is the use of sockets to obtain data from as against from memory (supplied by libFuzzer).

bshastry avatar Jun 27 '18 11:06 bshastry

I have no simple suggestions.

I did think of memstream as an alternative to read from instead of a socket, but that always provides a null terminator.

mrdeep1 avatar Jul 02 '18 09:07 mrdeep1