1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
//go:build gofuzz
// +build gofuzz
package trace
import (
"bytes"
"encoding/binary"
"fmt"
"math"
"math/rand"
"strings"
)
func Fuzz(data []byte) int {
buffer, err := New()
if err != nil {
return -1
}
defer buffer.Close()
masks := []string{
strings.Repeat("A", 1024),
strings.Repeat("B", 4*1024),
strings.Repeat("C", 8*1024),
"secret",
"prefix_secret",
"secret_suffix",
"ssecret",
"secrett",
"ssecrett",
}
buffer.SetMasked(masks)
seed := data
if len(seed) < 8 {
seed = append(seed, make([]byte, 8-len(seed))...)
}
r := rand.New(rand.NewSource(int64(binary.BigEndian.Uint64(seed))))
// copy fuzz input to new slice, with interspersed mask values at random locations
var src []byte
chunk(r, data, func(part []byte) {
src = append(src, part...)
if r.Intn(2) == 1 {
src = append(src, []byte(masks[r.Intn(len(masks))])...)
}
})
// write src to buffer, but with random sized slices
chunk(r, src, func(part []byte) {
n, err := buffer.Write(part)
if err != nil {
panic(err)
}
if n != len(part) {
panic(fmt.Sprintf("n(%d) < len(part)(%d)", n, len(part)))
}
})
contents, err := buffer.Bytes(0, math.MaxInt64)
if err != nil {
panic(err)
}
for _, mask := range masks {
if bytes.Contains(contents, []byte(mask)) {
panic(fmt.Sprintf("mask %q present in %q", mask, contents))
}
}
return 0
}
func chunk(r *rand.Rand, input []byte, fn func(part []byte)) {
for {
if len(input) == 0 {
break
}
offset := 1 + r.Intn(len(input))
fn(input[:offset])
input = input[offset:]
}
}
|
