wolfSSL · Oct 24, 2024 · Jan 14, 2025
Showing with 14 additions and 1 deletion.

+3 −0 .gitignore

+7 −1 CMakeLists.txt

+3 −0 cifuzz-hints.txt

+1 −0 cifuzz.yaml

0 fuzz.cpp
diff --git a/.gitignore b/.gitignore
@@ -449,3 +449,6 @@ debian/control
 /**/.vscode/launch.json
 /**/.vscode/ipch
 /**/sdkconfig.esp32dev
+
+.cifuzz/
+.cifuzz-*/
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -34,7 +34,10 @@ if("${CMAKE_SOURCE_DIR}" STREQUAL "${CMAKE_BINARY_DIR}")
      You must delete them, or cmake will refuse to work.")
 endif()
 
-project(wolfssl VERSION 5.7.2 LANGUAGES C ASM)
+project(wolfssl VERSION 5.7.2 LANGUAGES C ASM CXX)
+
+find_package(cifuzz NO_SYSTEM_ENVIRONMENT_PATH)
+enable_fuzz_testing()
 
 # Set WOLFSSL_ROOT if not already defined
 if ("${WOLFSSL_ROOT}" STREQUAL "")
@@ -2760,3 +2763,6 @@ if(WOLFSSL_INSTALL)
     DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/wolfssl
     )
 endif()
+
+add_fuzz_test(fuzz fuzz.cpp)
+target_link_libraries(fuzz wolfssl)
diff --git a/cifuzz-hints.txt b/cifuzz-hints.txt
@@ -0,0 +1,3 @@
+When fuzzing the function `wc_AesCbcDecrypt` ensure that the decrypted buffer
+is large enough for the input that is passed to the function. Either allocate a
+large enough buffer or discard large fuzzing inputs.
diff --git a/cifuzz.yaml b/cifuzz.yaml
@@ -0,0 +1 @@
+build-system: cmake
diff --git a/fuzz.cpp b/fuzz.cpp