mirror of https://github.com/google/oss-fuzz.git
58 lines
1.8 KiB
Python
58 lines
1.8 KiB
Python
|
#!/usr/bin/python3
|
||
|
|
# Copyright 2023 Google LLC
|
||
|
|
#
|
||
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
# you may not use this file except in compliance with the License.
|
||
|
|
# You may obtain a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
# See the License for the specific language governing permissions and
|
||
|
|
# limitations under the License.
|
||
|
|
|
||
|
|
import sys
|
||
|
|
import atheris
|
||
|
|
import requests
|
||
|
|
import httpretty
|
||
|
|
|
||
|
|
|
||
|
|
def test_one(input_data):
|
||
|
|
fdp = atheris.FuzzedDataProvider(input_data)
|
||
|
|
|
||
|
|
# Enable httpretty
|
||
|
|
httpretty.enable(verbose=True, allow_net_connect=False)
|
||
|
|
|
||
|
|
# Create arguments
|
||
|
|
http_body = fdp.ConsumeUnicodeNoSurrogates(sys.maxsize)
|
||
|
|
if fdp.ConsumeBool():
|
||
|
|
header_dict = {
|
||
|
|
fdp.ConsumeUnicodeNoSurrogates(24): fdp.ConsumeUnicodeNoSurrogates(24),
|
||
|
|
fdp.ConsumeUnicodeNoSurrogates(24): fdp.ConsumeUnicodeNoSurrogates(24),
|
||
|
|
fdp.ConsumeUnicodeNoSurrogates(24): fdp.ConsumeUnicodeNoSurrogates(24),
|
||
|
|
fdp.ConsumeUnicodeNoSurrogates(24): fdp.ConsumeUnicodeNoSurrogates(24)
|
||
|
|
}
|
||
|
|
else:
|
||
|
|
header_dict = None
|
||
|
|
|
||
|
|
# Pass random arguments to register_uri and ensure we can get it
|
||
|
|
try:
|
||
|
|
httpretty.register_uri(httpretty.GET,
|
||
|
|
"http://fuzzing.com/",
|
||
|
|
body=http_body,
|
||
|
|
content_type=fdp.ConsumeUnicodeNoSurrogates(32),
|
||
|
|
adding_headers=header_dict)
|
||
|
|
response = requests.get('http://fuzzing.com')
|
||
|
|
except httpretty.HTTPrettyError:
|
||
|
|
pass
|
||
|
|
|
||
|
|
httpretty.reset()
|
||
|
|
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
atheris.instrument_all()
|
||
|
|
atheris.Setup(sys.argv, test_one)
|
||
|
|
atheris.Fuzz()
|