hostapd/tests/fuzzing
Andrei Otcheretianski 694a1c6873 SAE: Make sme_sae_auth() return IE offset
Authentication frames include several fixed body parts (see Table 9-68
(Authentication frame body) and Table 9-69 (Presence of fields and
elements in Authentication frames) in IEEE P802.11-REVme/D2.0).

To be able to parse the IE part, these fields need to be skipped. Since
SAE logic already implements this parsing, change SAE authentication
handling functions to return the offset to the IE part. This preparation
is needed for future MLD patches that need to parse out the ML related
elements in the Authentication frames.

Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>
2022-12-17 17:11:16 +02:00
..
ap-mgmt build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
asn1 build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
dpp-uri build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
eap-aka-peer tests: Limit maximum number of frames in fuzzing tests 2021-05-04 18:19:23 +03:00
eap-mschapv2-peer build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
eap-sim-peer tests: Limit maximum number of frames in fuzzing tests 2021-05-04 18:19:23 +03:00
eapol-key-auth build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
eapol-key-supp MLD STA: Extend key configuration functions to support Link ID 2022-11-06 23:36:49 +02:00
eapol-supp Provide information about the encryption status of received EAPOL frames 2022-05-07 21:37:03 +03:00
json build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
p2p tests: Fix p2p fuzzer build after API change 2020-12-23 14:09:52 +02:00
pasn-init tests: Fix pasn-init fuzz tester build 2022-11-19 17:21:45 +02:00
pasn-resp tests: Fuzz testing for PASN 2022-11-06 17:22:14 +02:00
sae SAE: Make sme_sae_auth() return IE offset 2022-12-17 17:11:16 +02:00
tls-client tests: Remove unused DH file from TLS client fuzzer 2022-04-15 23:42:15 +03:00
tls-server build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
wnm wpa_supplicant: Move wpa_config_get_line() into utils 2021-02-16 00:47:43 +02:00
x509 build: Put archive files into build/ folder too 2020-10-11 11:16:00 +03:00
build-test.sh tests: Build test for new fuzzer tools 2019-06-02 13:00:39 +03:00
fuzzer-common.c tests: New style fuzzing tool for wpa_supplicant WNM handling 2019-06-02 13:00:36 +03:00
fuzzer-common.h tests: New style fuzzing tool for wpa_supplicant WNM handling 2019-06-02 13:00:36 +03:00
README tests: New style fuzzing tool for wpa_supplicant WNM handling 2019-06-02 13:00:36 +03:00
rules.include tests: Fix CC and CFLAGS default processing for fuzzing 2022-11-06 17:11:47 +02:00

hostap.git fuzz testing
-----------------------

These tools can be used for fuzz testing of various components used
within wpa_supplicant and hostapd. Each directory contains a fuzzing
tool that focuses on one input handler. Each tool can be compiled either
to work with the libFuzzer or as a separate tool that reads the input
from a file specified on the command line, e.g., for American fuzzy lop
(afl-fuzz). Example test corpus is included in */corpus directory.

Example fuzzing with libFuzzer

cd @TOOL@
make clean
make LIBFUZZER=y
./@TOOL@ corpus

Example fuzzing with afl-fuzz

cd @TOOL@
make clean
CC=afl-gcc make
afl-fuzz -i corpus -o findings -- $PWD/@TOOL@ @@