mirrors/uquic
1
0
Fork 0
mirror of https://github.com/refraction-networking/uquic.git synced 2025-04-04 20:57:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

run two handshakes in the handshake fuzzer

Browse source 
This allows us to fuzz both session resuption and 0-RTT.
This commit is contained in:
Marten Seemann 2020-09-05 13:52:22 +07:00
parent 9a2062144e
commit 88ff59a1b4
1 changed files with 39 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

52
fuzzing/handshake/fuzz.go
View file

@ -17,6 +17,7 @@ import (
var cert *tls.Certificate var cert *tls.Certificate
var certPool *x509.CertPool var certPool *x509.CertPool
var sessionTicketKey = [32]byte{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32}
func init() { func init() {
priv, err := rsa.GenerateKey(rand.Reader, 1024) priv, err := rsa.GenerateKey(rand.Reader, 1024)
@ -158,7 +159,7 @@ func maxEncLevel(cs handshake.CryptoSetup, encLevel protocol.EncryptionLevel) pr
} }
// PrefixLen is the number of bytes used for configuration // PrefixLen is the number of bytes used for configuration
const PrefixLen = 2 const PrefixLen = 4
// Fuzz fuzzes the TLS 1.3 handshake used by QUIC. // Fuzz fuzzes the TLS 1.3 handshake used by QUIC.
//go:generate go run ./cmd/corpus.go //go:generate go run ./cmd/corpus.go
@ -166,13 +167,10 @@ func Fuzz(data []byte) int {
if len(data) < PrefixLen { if len(data) < PrefixLen {
return -1 return -1
} }
enable0RTTClient := helper.NthBit(data[0], 0) runConfig1 := data[0]
enable0RTTServer := helper.NthBit(data[0], 1) messageConfig1 := data[1]
useSessionTicketCache := helper.NthBit(data[0], 2) runConfig2 := data[2]
sendPostHandshakeMessageToClient := helper.NthBit(data[0], 3) messageConfig2 := data[3]
sendPostHandshakeMessageToServer := helper.NthBit(data[0], 4)
messageToReplace := data[1] % 32
messageToReplaceEncLevel := toEncryptionLevel(data[1] >> 6)
data = data[PrefixLen:] data = data[PrefixLen:]
clientConf := &tls.Config{ clientConf := &tls.Config{
@ -180,9 +178,27 @@ func Fuzz(data []byte) int {
NextProtos: []string{alpn}, NextProtos: []string{alpn},
RootCAs: certPool, RootCAs: certPool,
} }
useSessionTicketCache := helper.NthBit(runConfig1, 2)
if useSessionTicketCache { if useSessionTicketCache {
clientConf.ClientSessionCache = tls.NewLRUClientSessionCache(5) clientConf.ClientSessionCache = tls.NewLRUClientSessionCache(5)
} }
if val := runHandshake(runConfig1, messageConfig1, clientConf, data); val != 1 {
return val
}
return runHandshake(runConfig2, messageConfig2, clientConf, data)
}
func runHandshake(runConfig uint8, messageConfig uint8, clientConf *tls.Config, data []byte) int {
enable0RTTClient := helper.NthBit(runConfig, 0)
enable0RTTServer := helper.NthBit(runConfig, 1)
sendPostHandshakeMessageToClient := helper.NthBit(runConfig, 3)
sendPostHandshakeMessageToServer := helper.NthBit(runConfig, 4)
sendSessionTicket := helper.NthBit(runConfig, 5)
messageToReplace := messageConfig % 32
messageToReplaceEncLevel := toEncryptionLevel(messageConfig >> 6)
cChunkChan, cInitialStream, cHandshakeStream := initStreams() cChunkChan, cInitialStream, cHandshakeStream := initStreams()
var client, server handshake.CryptoSetup var client, server handshake.CryptoSetup
runner := newRunner(&client, &server) runner := newRunner(&client, &server)
@ -211,8 +227,9 @@ func Fuzz(data []byte) int {
&wire.TransportParameters{}, &wire.TransportParameters{},
runner, runner,
&tls.Config{ &tls.Config{
Certificates: []tls.Certificate{*cert}, Certificates: []tls.Certificate{*cert},
NextProtos: []string{alpn}, NextProtos: []string{alpn},
SessionTicketKey: sessionTicketKey,
}, },
enable0RTTServer, enable0RTTServer,
utils.NewRTTStats(), utils.NewRTTStats(),
@ -273,13 +290,22 @@ messageLoop:
} }
<-done <-done
_ = client.ConnectionState()
_ = server.ConnectionState()
if runner.errored { if runner.errored {
return 1 return 0
} }
if sendPostHandshakeMessageToClient { if sendSessionTicket {
if _, err := server.GetSessionTicket(); err != nil { ticket, err := server.GetSessionTicket()
if err != nil {
panic(err) panic(err)
} }
if ticket == nil {
panic("empty ticket")
}
client.HandleMessage(ticket, protocol.Encryption1RTT)
}
if sendPostHandshakeMessageToClient {
client.HandleMessage(data, messageToReplaceEncLevel) client.HandleMessage(data, messageToReplaceEncLevel)
} }
if sendPostHandshakeMessageToServer { if sendPostHandshakeMessageToServer {