Index: net/data/fuzzer_dictionaries/net_websocket_frame_parser_fuzzer.dict |
diff --git a/net/data/fuzzer_dictionaries/net_websocket_frame_parser_fuzzer.dict b/net/data/fuzzer_dictionaries/net_websocket_frame_parser_fuzzer.dict |
new file mode 100644 |
index 0000000000000000000000000000000000000000..afba1606166715bc90344e108f10f787d755f48e |
--- /dev/null |
+++ b/net/data/fuzzer_dictionaries/net_websocket_frame_parser_fuzzer.dict |
@@ -0,0 +1,460 @@ |
+# Copyright 2016 The Chromium Authors. All rights reserved. |
+# Use of this source code is governed by a BSD-style license that can be |
+# found in the LICENSE file. |
+ |
+# This file has been generated with testing/libfuzzer/dictionary_generator.py |
+# using net_websocket_frame_parser_fuzzer binary and RFC 6455. |
+"WG" |
+"all" |
+"LETTER" |
+"(\"MUST\"," |
+"Unknown" |
+"supported" |
+"|K|" |
+"[WSAPI]," |
+"[TALKING]." |
+"\"UTF-8," |
+"[RFC6265]" |
+"[FIPS.180-3]," |
+"F.," |
+"T." |
+"U+007A" |
+"\"IETF" |
+"implementation" |
+"(" |
+"cache" |
+"\"OPTIONAL\"" |
+"environment" |
+"0" |
+"only" |
+"version" |
+"G.," |
+"text" |
+"G." |
+"[RFC3987])." |
+"string" |
+"get" |
+"==" |
+"failed." |
+"[RFC3986]." |
+"(2MSL)," |
+"|F|R|R|R|" |
+"DIGIT)" |
+"FIN" |
+"(URI):" |
+"SHA-1" |
+"resource" |
+"MAY" |
+"EXAMPLE:" |
+"list" |
+"SYN" |
+"large" |
+"A.5" |
+"J." |
+"common" |
+"RSV3:" |
+"\"RECOMMENDED\"," |
+"ASCII" |
+"(IP" |
+"Y.," |
+"set" |
+"HTTP" |
+"IANA" |
+"frame" |
+"M." |
+"direct" |
+"this," |
+"Version" |
+"are" |
+"[RFC4086]" |
+"GET," |
+"UTF-8-" |
+"_ASCII_" |
+"TLS," |
+"TLS." |
+"Z)" |
+"GET" |
+"section" |
+"[RFC3986]:" |
+"TCP" |
+"ABNF." |
+"unable" |
+"probably" |
+"MUST" |
+"[RFC3986]," |
+"metadata" |
+"available" |
+"R.," |
+"C" |
+"hash" |
+"\"SHALL" |
+"U+007E" |
+"\"HTTP/1.1" |
+"\"MAY\"," |
+"CONNECTING" |
+"_ASCII" |
+"key" |
+"address" |
+"OPTIONAL;" |
+"[" |
+"P." |
+"received" |
+"NOTE:" |
+"RSV1," |
+"WHATWG" |
+"\"258EAFA5-E914-47DA-95CA-C5AB0DC85B11\"" |
+"(IETF)" |
+"IMPLEMENTATION" |
+"|I|S|S|S|" |
aarya
2016/07/07 16:34:51
Probably needs ignoring.
mmoroz
2016/07/07 16:44:37
+1, or may be parse '|' like OR and generate multi
|
+"CLOSED" |
+"NOT" |
+"[RFC3629]." |
+"J.," |
+"UTF-8." |
+"\"REQUIRED\"," |
+"useful" |
+"SHUT_WR" |
+"(IETF)." |
+"H." |
+"HTTP)." |
+"S." |
+"ASCII)" |
+"allocated" |
+"poll" |
+"BCP" |
+"select" |
+"[RFC4270])." |
+"use" |
+"LATIN" |
+"from" |
+"C." |
+"certificate" |
+"to" |
+"\"SOCKS" |
+"create" |
+"S.," |
+"|N|V|V|V|" |
+"[RFC2616]" |
+"(IRI)" |
+"call" |
+"memory" |
+"expected" |
+"type" |
+"empty" |
+"with" |
+"[RFC2616]." |
+"OPEN" |
+"[RFC4648]" |
+"BNF" |
+"NOT\"," |
+"[RFC2119]" |
+"flag" |
+"[RFC4270]" |
aarya
2016/07/07 16:31:35
Are these parsed properly ? Looks like incorrect k
mmoroz
2016/07/07 16:44:36
I'll write some additional filters to ignore stuff
|
+"TCP." |
+"[RFC2616]," |
+"\"258EAFA5-E914-47DA-" |
+"CLOSING" |
+"unnecessarily" |
+"must" |
+"high" |
+"[RFC3864]." |
+"ANSI" |
+"this" |
+"work" |
+"value" |
+"while" |
+"\"SHALL\"," |
+"error" |
+"following" |
+"closing" |
+"(NZDIGIT" |
+"UTF-8" |
+"type." |
+"(UUID)" |
+"is" |
+"in" |
+"thus" |
+"Invalid" |
+"parse" |
+"key." |
+"allowed" |
+"Z)." |
+"TLS.)" |
+"failed" |
+"|A|" |
+"binary" |
+"\"A" |
+"[RFC5226]" |
+")" |
+"algorithm." |
+"returning" |
+"ISSN:" |
+"U+0041" |
+"write" |
+"[RFC5234]" |
+"I." |
+"units" |
+"[RFC4122]" |
+"[WSAPI]" |
+"URN" |
+"A" |
+"used" |
+"XOR" |
+"HTML" |
+"[RFC1928]" |
+"may" |
+"IP" |
+"after" |
+"(TLS)" |
+"H.," |
+"IRI" |
+"running" |
+"*LWS" |
+"HTTPS" |
+"CAPITAL" |
+"SMTP" |
+"such" |
+"data" |
+"a" |
+"length:" |
+"[ANSI.X3-4.1986]" |
+"tracking" |
+"[RFC6265]." |
+"i" |
+"2BX" |
+"or" |
+"[RFC5226]." |
+"[RFC5226]," |
+"M.," |
+"Names" |
+"HTTP," |
+"RST" |
+"the" |
+"MOD" |
+"If" |
+"\"SHOULD" |
+"being" |
+"-" |
+"SHA-1," |
+"E.," |
+"(IDN)" |
+"ABNF)." |
+"D.," |
+"mechanism" |
+"[RFC4122])" |
+"(GUID," |
+"RSV3" |
+"its" |
+"_A" |
+"before" |
+"U+0061" |
+"[RFC2119]." |
+"unsigned" |
+"writing" |
+"source" |
+"SOCKS5" |
+"P.," |
+"HTTP/1.1" |
+"\"HTTP" |
+"URI." |
+"..." |
+"format" |
+"read" |
+"|S|" |
+"URI" |
+"Bad" |
+"URI:" |
+"[RFC3629]" |
+"not" |
+"R." |
+"\"IESG" |
+"missing," |
+"name" |
+"success" |
+"C5AB0DC85B11\"." |
+"signal" |
+"WD-" |
+"A.," |
+"API" |
+"SQL" |
+"page" |
+"STD" |
+"API)," |
+"because" |
+"bytes" |
+"some" |
+"back" |
+"HYBI" |
+"\"258EAFA5-" |
+"RST," |
+"[RFC6066]" |
+"[RFC3864]" |
+"I.," |
+"RSV2," |
+"[RFC5234]," |
+"for" |
+"space" |
+"ABNF\"," |
+"avoid" |
+"/" |
+"L." |
+"time." |
+"does" |
+"TIME_WAIT" |
+"CONNECT" |
+"GUID." |
+"assuming" |
+"supports" |
+"[RFC3986]" |
+"be" |
+"run" |
+"This" |
+"ABNF," |
+"PUB" |
+"free" |
+"E914-47DA-95CA-C5AB0DC85B11\"" |
+"RFC" |
+"X3.4," |
+"base" |
+"[RFC4648])," |
+"[RFC4648])." |
+"[RFC6066]." |
+"received." |
+"by" |
+"[RFC2818]." |
+"on" |
+"DIGIT" |
+"FIN:" |
+"ABNF" |
+"TLS\"," |
+"of" |
+"could" |
+"&" |
+"[TALKING]" |
+"wrong" |
+"times" |
+"[RFC6202]" |
+"length" |
+"UI" |
+"UK" |
+"transfer" |
+"HTTP/1.1\"." |
+"[ANSI.X3-4.1986]." |
+"HTTP/1.1\"," |
+"support" |
+"[RFC5246]." |
+"API\"," |
+"already" |
+"HTTP/HTTPS" |
+">=" |
+"E914-47DA-95CA-C5AB0DC85B11\"," |
+"[RFC4648])" |
+"number" |
+"one" |
+"IDN" |
+"Start" |
+"NZDIGIT" |
+"RFC." |
+"ISO" |
+"SMALL" |
+"open" |
+"U+0021" |
+"size" |
+"IETF" |
+"unknown" |
+"top" |
+"*" |
+"MASK" |
+"long" |
+"class" |
+"start" |
+"too" |
+":" |
+"was" |
+"configured" |
+"[RFC2817]." |
+"TLS" |
+"that" |
+"completed" |
+"[FIPS.180-3]" |
+"but" |
+"95CA-C5AB0DC85B11\"" |
+"BSD" |
+"FIPS" |
+"[RFC6454]" |
+"DNS" |
+"Error" |
+"line" |
+"trying" |
+"true" |
+"\"URI\"" |
+"target" |
+"16" |
+"default" |
+"B." |
+"up" |
+"SHOULD" |
+"(IESG)." |
+"API." |
+"called" |
+"and" |
+"UPGRADE" |
+"false" |
+"[RFC6202]." |
+"[RFC2817]" |
+"URI)" |
+"lost." |
+"[RFC2818]" |
+"an" |
+"To" |
+"as" |
+"at" |
+"have" |
+"need" |
+"null" |
+"U+005A" |
+"any" |
+"contents" |
+"[RFC5246]" |
+"\"SHOULD\"," |
aarya
2016/07/07 16:31:35
Also should we be stripping like ", ', [, ], etc o
mmoroz
2016/07/07 16:44:36
I need to think a bit about this. For the most cas
|
+"no" |
+"when" |
+"invalid" |
+"A." |
+"application" |
+"valid" |
+"take" |
+"which" |
+"test" |
+"you" |
+"=" |
+"[RFC5321]" |
+"requested" |
+"begin" |
+"multiple" |
+"[RFC5234]." |
+"(FIN/ACK)," |
+"HTTP\"," |
+"[RFC3987]" |
+"L-S.," |
+"\"MUST" |
+"W3C" |
+"\"MUST\"," |
+"E." |
+"Common" |
+"T.," |
+"The" |
+"]" |
+"pages" |
+"D." |
+"\"GET" |
+"[RFC6265])," |
+"TW12" |
+"IANA." |
+"finished" |
+"L.," |
aarya
2016/07/07 16:34:51
I see a lot of letter followed by .(dot) which see
mmoroz
2016/07/07 16:44:36
Interesting. Probably worth to remove.
|
+"As" |
+"ALPHA" |
+"+" |
+"D.3." |
+ |