| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include <algorithm> | 5 #include <algorithm> |
| 6 #include <sstream> | 6 #include <sstream> |
| 7 #include <string> | 7 #include <string> |
| 8 #include <vector> | 8 #include <vector> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| 11 #include "base/file_util.h" | 11 #include "base/file_util.h" |
| 12 #include "base/files/file_path.h" | 12 #include "base/files/file_path.h" |
| 13 #include "base/json/json_reader.h" | 13 #include "base/json/json_reader.h" |
| 14 #include "base/memory/scoped_ptr.h" | 14 #include "base/memory/scoped_ptr.h" |
| 15 #include "base/time/time.h" | 15 #include "base/time/time.h" |
| 16 #include "base/values.h" | 16 #include "base/values.h" |
| 17 #include "net/base/address_list.h" | 17 #include "net/base/address_list.h" |
| 18 #include "net/base/dns_util.h" | 18 #include "net/base/dns_util.h" |
| 19 #include "net/base/io_buffer.h" | 19 #include "net/base/io_buffer.h" |
| 20 #include "net/base/ip_endpoint.h" | 20 #include "net/base/ip_endpoint.h" |
| 21 #include "net/dns/dns_protocol.h" | 21 #include "net/dns/dns_protocol.h" |
| 22 #include "net/dns/dns_query.h" | 22 #include "net/dns/dns_query.h" |
| 23 #include "net/dns/dns_response.h" | 23 #include "net/dns/dns_response.h" |
| 24 | 24 |
| 25 namespace { | 25 namespace { |
| 26 | 26 |
| 27 void CrashDoubleFree(void) { | 27 void CrashDoubleFree(void) { |
| 28 // Cause ASAN to detect a double-free | 28 // Cause ASAN to detect a double-free |
| 29 void *p = malloc(1); | 29 void *p = malloc(1); |
| 30 LOG(INFO) << "Allocated p=" << p << ". Double-freeing..."; | 30 VLOG(0) << "Allocated p=" << p << ". Double-freeing..."; |
| 31 free(p); | 31 free(p); |
| 32 free(p); | 32 free(p); |
| 33 } | 33 } |
| 34 | 34 |
| 35 void CrashNullPointerDereference(void) { | 35 void CrashNullPointerDereference(void) { |
| 36 // Cause the program to segfault with a NULL pointer dereference | 36 // Cause the program to segfault with a NULL pointer dereference |
| 37 int *p = NULL; | 37 int *p = NULL; |
| 38 *p = 0; | 38 *p = 0; |
| 39 } | 39 } |
| 40 | 40 |
| (...skipping 24 matching lines...) Expand all Loading... |
| 65 } | 65 } |
| 66 | 66 |
| 67 base::DictionaryValue* dict; | 67 base::DictionaryValue* dict; |
| 68 if (!value->GetAsDictionary(&dict)) { | 68 if (!value->GetAsDictionary(&dict)) { |
| 69 LOG(ERROR) << filename << ": test case is not a dictionary."; | 69 LOG(ERROR) << filename << ": test case is not a dictionary."; |
| 70 return false; | 70 return false; |
| 71 } | 71 } |
| 72 | 72 |
| 73 *crash_test = dict->HasKey("crash_test"); | 73 *crash_test = dict->HasKey("crash_test"); |
| 74 if (*crash_test) { | 74 if (*crash_test) { |
| 75 LOG(INFO) << filename << ": crash_test is set!"; | 75 VLOG(0) << filename << ": crash_test is set!"; |
| 76 return true; | 76 return true; |
| 77 } | 77 } |
| 78 | 78 |
| 79 int id_int; | 79 int id_int; |
| 80 if (!dict->GetInteger("id", &id_int)) { | 80 if (!dict->GetInteger("id", &id_int)) { |
| 81 LOG(ERROR) << filename << ": id is missing or not an integer."; | 81 LOG(ERROR) << filename << ": id is missing or not an integer."; |
| 82 return false; | 82 return false; |
| 83 } | 83 } |
| 84 if (!FitsUint16(id_int)) { | 84 if (!FitsUint16(id_int)) { |
| 85 LOG(ERROR) << filename << ": id is out of range."; | 85 LOG(ERROR) << filename << ": id is out of range."; |
| (...skipping 33 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 119 return false; | 119 return false; |
| 120 } | 120 } |
| 121 if (!FitsUint8(resp_byte_int)) { | 121 if (!FitsUint8(resp_byte_int)) { |
| 122 LOG(ERROR) << filename << ": response[" << i << "] is out of range."; | 122 LOG(ERROR) << filename << ": response[" << i << "] is out of range."; |
| 123 return false; | 123 return false; |
| 124 } | 124 } |
| 125 resp_buf->push_back(static_cast<char>(resp_byte_int)); | 125 resp_buf->push_back(static_cast<char>(resp_byte_int)); |
| 126 } | 126 } |
| 127 DCHECK(resp_buf->size() == resp_size); | 127 DCHECK(resp_buf->size() == resp_size); |
| 128 | 128 |
| 129 LOG(INFO) << "Query: id=" << id_int << ", " | 129 VLOG(0) << "Query: id=" << id_int << ", " |
| 130 << "qname=" << *qname << ", " | 130 << "qname=" << *qname << ", " |
| 131 << "qtype=" << qtype_int << ", " | 131 << "qtype=" << qtype_int << ", " |
| 132 << "resp_size=" << resp_size; | 132 << "resp_size=" << resp_size; |
| 133 | 133 |
| 134 return true; | 134 return true; |
| 135 } | 135 } |
| 136 | 136 |
| 137 void RunTestCase(uint16 id, std::string& qname, uint16 qtype, | 137 void RunTestCase(uint16 id, std::string& qname, uint16 qtype, |
| 138 std::vector<char>& resp_buf) { | 138 std::vector<char>& resp_buf) { |
| 139 net::DnsQuery query(id, qname, qtype); | 139 net::DnsQuery query(id, qname, qtype); |
| 140 net::DnsResponse response; | 140 net::DnsResponse response; |
| 141 std::copy(resp_buf.begin(), resp_buf.end(), response.io_buffer()->data()); | 141 std::copy(resp_buf.begin(), resp_buf.end(), response.io_buffer()->data()); |
| 142 | 142 |
| 143 if (!response.InitParse(resp_buf.size(), query)) { | 143 if (!response.InitParse(resp_buf.size(), query)) { |
| 144 LOG(INFO) << "InitParse failed."; | 144 VLOG(0) << "InitParse failed."; |
| 145 return; | 145 return; |
| 146 } | 146 } |
| 147 | 147 |
| 148 net::AddressList address_list; | 148 net::AddressList address_list; |
| 149 base::TimeDelta ttl; | 149 base::TimeDelta ttl; |
| 150 net::DnsResponse::Result result = response.ParseToAddressList( | 150 net::DnsResponse::Result result = response.ParseToAddressList( |
| 151 &address_list, &ttl); | 151 &address_list, &ttl); |
| 152 if (result != net::DnsResponse::DNS_PARSE_OK) { | 152 if (result != net::DnsResponse::DNS_PARSE_OK) { |
| 153 LOG(INFO) << "ParseToAddressList failed: " << result; | 153 VLOG(0) << "ParseToAddressList failed: " << result; |
| 154 return; | 154 return; |
| 155 } | 155 } |
| 156 | 156 |
| 157 // Print the response in one compact line. | 157 // Print the response in one compact line. |
| 158 std::stringstream result_line; | 158 std::stringstream result_line; |
| 159 result_line << "Response: address_list={ "; | 159 result_line << "Response: address_list={ "; |
| 160 for (unsigned int i = 0; i < address_list.size(); i++) | 160 for (unsigned int i = 0; i < address_list.size(); i++) |
| 161 result_line << address_list[i].ToString() << " "; | 161 result_line << address_list[i].ToString() << " "; |
| 162 result_line << "}, ttl=" << ttl.InSeconds() << "s"; | 162 result_line << "}, ttl=" << ttl.InSeconds() << "s"; |
| 163 | 163 |
| 164 LOG(INFO) << result_line.str(); | 164 VLOG(0) << result_line.str(); |
| 165 } | 165 } |
| 166 | 166 |
| 167 bool ReadAndRunTestCase(const char* filename) { | 167 bool ReadAndRunTestCase(const char* filename) { |
| 168 uint16 id = 0; | 168 uint16 id = 0; |
| 169 std::string qname; | 169 std::string qname; |
| 170 uint16 qtype = 0; | 170 uint16 qtype = 0; |
| 171 std::vector<char> resp_buf; | 171 std::vector<char> resp_buf; |
| 172 bool crash_test = false; | 172 bool crash_test = false; |
| 173 | 173 |
| 174 LOG(INFO) << "Test case: " << filename; | 174 VLOG(0) << "Test case: " << filename; |
| 175 | 175 |
| 176 // ReadTestCase will print a useful error message if it fails. | 176 // ReadTestCase will print a useful error message if it fails. |
| 177 if (!ReadTestCase(filename, &id, &qname, &qtype, &resp_buf, &crash_test)) | 177 if (!ReadTestCase(filename, &id, &qname, &qtype, &resp_buf, &crash_test)) |
| 178 return false; | 178 return false; |
| 179 | 179 |
| 180 if (crash_test) { | 180 if (crash_test) { |
| 181 LOG(INFO) << "Crashing."; | 181 VLOG(0) << "Crashing."; |
| 182 CrashDoubleFree(); | 182 CrashDoubleFree(); |
| 183 // if we're not running under ASAN, that might not have worked | 183 // if we're not running under ASAN, that might not have worked |
| 184 CrashNullPointerDereference(); | 184 CrashNullPointerDereference(); |
| 185 NOTREACHED(); | 185 NOTREACHED(); |
| 186 return true; | 186 return true; |
| 187 } | 187 } |
| 188 | 188 |
| 189 std::string qname_dns; | 189 std::string qname_dns; |
| 190 if (!net::DNSDomainFromDot(qname, &qname_dns)) { | 190 if (!net::DNSDomainFromDot(qname, &qname_dns)) { |
| 191 LOG(ERROR) << filename << ": DNSDomainFromDot(" << qname << ") failed."; | 191 LOG(ERROR) << filename << ": DNSDomainFromDot(" << qname << ") failed."; |
| (...skipping 14 matching lines...) Expand all Loading... |
| 206 if (!ReadAndRunTestCase(argv[i])) | 206 if (!ReadAndRunTestCase(argv[i])) |
| 207 ret = 2; | 207 ret = 2; |
| 208 | 208 |
| 209 // Cluster-Fuzz likes "#EOF" as the last line of output to help distinguish | 209 // Cluster-Fuzz likes "#EOF" as the last line of output to help distinguish |
| 210 // successful runs from crashes. | 210 // successful runs from crashes. |
| 211 printf("#EOF\n"); | 211 printf("#EOF\n"); |
| 212 | 212 |
| 213 return ret; | 213 return ret; |
| 214 } | 214 } |
| 215 | 215 |
| OLD | NEW |