aa92d0e676
- M0: libghostty SSH 终端（渲染/输入/连接）+ 白屏修复(OutputGate) + 会话状态机/自动重连 - M1: tsnet 用户态组网 + SSH-over-tsnet(fd 桥)，shell 级真机验证；R5(Go+gvisor+C+++Swift 同进程) retire - M1.5: tmux -CC 原生 tab（MVP） - 结构: packages/(TXCore·TXTransport), apps/TerminalX, vendor/(libghostty-spm/libssh2/mbedtls/tsnet-bridge), artifacts/ - 文档: CLAUDE.md + docs/HANDOFF.md（新会话入口） - 环境: 认证代理→依赖 vendor 本地化；Go 在 ~/.local/go；仅模拟器/未签名 - 待续: M2 mosh, tmux 多 pane, M4 安全(host key/SE) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
98 lines
2.3 KiB
C++
98 lines
2.3 KiB
C++
/* Copyright (C) The libssh2 project and its contributors.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
#include <assert.h>
|
|
#include <errno.h>
|
|
#include <stdbool.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sys/socket.h>
|
|
#include <unistd.h>
|
|
#include <libssh2.h>
|
|
#include "testinput.h"
|
|
|
|
#define FUZZ_ASSERT(COND) \
|
|
if(!(COND)) \
|
|
{ \
|
|
fprintf(stderr, "Assertion failed: " #COND "\n%s", \
|
|
strerror(errno)); \
|
|
assert((COND)); \
|
|
}
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
|
|
{
|
|
int socket_fds[2] = {-1, -1};
|
|
ssize_t written;
|
|
int rc;
|
|
LIBSSH2_SESSION *session = NULL;
|
|
int handshake_completed = 0;
|
|
|
|
rc = libssh2_init(0);
|
|
|
|
if(rc) {
|
|
fprintf(stderr, "libssh2 initialization failed (%d)\n", rc);
|
|
goto EXIT_LABEL;
|
|
}
|
|
|
|
// Create a socket pair so data can be sent in.
|
|
rc = socketpair(AF_UNIX, SOCK_STREAM, 0, socket_fds);
|
|
FUZZ_ASSERT(rc == 0);
|
|
|
|
written = send(socket_fds[1], data, size, 0);
|
|
|
|
if(written != size)
|
|
{
|
|
// Handle whatever error case we're in.
|
|
fprintf(stderr, "send() of %zu bytes returned %zu (%d)\n",
|
|
size,
|
|
written,
|
|
errno);
|
|
goto EXIT_LABEL;
|
|
}
|
|
|
|
rc = shutdown(socket_fds[1], SHUT_WR);
|
|
if(rc)
|
|
{
|
|
fprintf(stderr, "socket shutdown failed (%d)\n", rc);
|
|
goto EXIT_LABEL;
|
|
}
|
|
|
|
// Create a session and start the handshake using the fuzz data passed in.
|
|
session = libssh2_session_init();
|
|
if(session) {
|
|
libssh2_session_set_blocking(session, 1);
|
|
}
|
|
else {
|
|
goto EXIT_LABEL;
|
|
}
|
|
|
|
if(libssh2_session_handshake(session, socket_fds[0])) {
|
|
goto EXIT_LABEL;
|
|
}
|
|
|
|
// If we get here the handshake actually completed.
|
|
handshake_completed = 1;
|
|
|
|
EXIT_LABEL:
|
|
|
|
if(session)
|
|
{
|
|
if(handshake_completed)
|
|
{
|
|
libssh2_session_disconnect(session,
|
|
"Normal Shutdown, Thank you for playing");
|
|
}
|
|
|
|
libssh2_session_free(session);
|
|
}
|
|
|
|
libssh2_exit();
|
|
|
|
close(socket_fds[0]);
|
|
close(socket_fds[1]);
|
|
|
|
return 0;
|
|
}
|