Return a malformed HTLC message when ephemeral pubkey is garbage

[rust-lightning] / fuzz / fuzz_targets / msg_update_add_htlc_target.rs

diff --git a/fuzz/fuzz_targets/msg_update_add_htlc_target.rs b/fuzz/fuzz_targets/msg_update_add_htlc_target.rs
new file mode 100644 (file)
index 0000000..5616047
--- /dev/null
+++ b/fuzz/fuzz_targets/msg_update_add_htlc_target.rs
@@ -0,0 +1,45 @@
+extern crate lightning;
+
+use lightning::ln::msgs;
+use lightning::util::reset_rng_state;
+
+use lightning::ln::msgs::{MsgEncodable, MsgDecodable};
+
+#[inline]
+pub fn do_test(data: &[u8]) {
+       reset_rng_state();
+       if let Ok(msg) = msgs::UpdateAddHTLC::decode(data){
+               let enc = msg.encode();
+               assert_eq!(&data[0..85], &enc[0..85]);
+               assert_eq!(&data[85+33..enc.len()], &enc[85+33..]);
+       }
+}
+
+#[cfg(feature = "afl")]
+#[macro_use] extern crate afl;
+#[cfg(feature = "afl")]
+fn main() {
+       fuzz!(|data| {
+               do_test(data);
+       });
+}
+
+#[cfg(feature = "honggfuzz")]
+#[macro_use] extern crate honggfuzz;
+#[cfg(feature = "honggfuzz")]
+fn main() {
+       loop {
+               fuzz!(|data| {
+                       do_test(data);
+               });
+       }
+}
+
+extern crate hex;
+#[cfg(test)]
+mod tests {
+       #[test]
+       fn duplicate_crash() {
+               super::do_test(&::hex::decode("00").unwrap());
+       }
+}