[tor-bugs] #21509 [Core Tor/Tor]: Fuzz v3 hidden services

[Tor Bug Tracker & Wiki]

#21509: Fuzz v3 hidden services
-----------------------------------+------------------------------------
 Reporter:  teor                   |          Owner:  nickm
     Type:  task                   |         Status:  accepted
 Priority:  High                   |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor           |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  fuzz, prop224, tor-hs  |  Actual Points:
Parent ID:                         |         Points:  2
 Reviewer:                         |        Sponsor:  SponsorR-can
-----------------------------------+------------------------------------

Comment (by nickm):

 I've attached the gcov output of running the fuzz_static_testcases.sh
 script on hs_descriptor.c with the current fuzzing corpus.  Note that this
 doesn't actually fuzz -- it just shows us what our current corpus reaches.
 But it looks like we're at least getting inside decode_intro_points() a
 little?   We should add some seed elements to the corpus that trigger more
 of it getting parsed, though.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21509#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online