Commit Graph

3643 Commits (2b3a64ef691190824385dea96dc34c672ab4645e)
 

Author SHA1 Message Date
Roger A. Light 2b3a64ef69 Fuzzing: Direct packet parsing fuzzing 3 years ago
Roger A. Light 245b2807ad Make test quiet. 3 years ago
Roger A. Light 0be6d00d66 Fuzzing: New broker packet fuzz targets
These initialise the broker and leave it running. This is problematic
from the point of view of deterministic testing, but should mean the
testing speed is vastly improved.
3 years ago
Roger A. Light 5b7036dfcd Quieten log output 3 years ago
Roger A. Light fa92db5480 Fix heap overflow when reading config.
This catches an error case where the broker would be exiting anyway.

Closes oss-fuzz #56008
3 years ago
Roger A. Light 84e21d478c Fuzzing: Fix use after free.
This occurs only in case of a bad config, and only when the broker is
already exiting.

Closes oss-fuzz #56009.
3 years ago
Roger A. Light 385ddd7d86 Limit bridge restart base and cap to prevent integer overflow.
Non-critical.

Closes oss-fuzz #56302.
3 years ago
Roger A. Light 77b5dfb770 Fuzzing: Basic mosquitto_passwd target 3 years ago
Roger A. Light 799e3c214d Fix build in some configurations. 3 years ago
Roger A. Light 5fbe8e5be2 Add --tls-keylog for clients. 3 years ago
Roger A. Light 7f0cd48921 Formatting plus whitespace tidy 3 years ago
Roger A. Light e85e43c633 Pass disconnect reason to callback. 3 years ago
Roger A. Light 5265668734 Only typedef mosquitto_plugin_id_t once. 3 years ago
Roger A. Light 71e87c7561 Some support for running broker sequence tests over websockets 3 years ago
Roger A. Light 946261571f Websockets: Don't fail on origin if no origins defined. 3 years ago
Roger A. Light 501082ed50 Remove duplicate subscribe event call 3 years ago
Roger A. Light d1b19b22aa Only free clientid on error. 3 years ago
Roger A. Light d72e1c4949 Add `mosquitto_property_remove`
This isfor removing properties from property lists.
3 years ago
Roger A. Light 63b84c493b Don't leak memory on bridge config.
Closes oss-fuzz #56003.

Non-critical, this was only in unreleased code.
3 years ago
Roger A. Light 365f7047af Message out event should be able to deny publishes. 3 years ago
Roger A. Light 23983afe82 Fix invalid handling of long hex in config file.
Closes oss-fuzz #55948.
3 years ago
Roger A. Light 769c94a103 Fix oss-fuzz #55950
Reproduces in the fuzz target, but testing hasn't reproduced in real
code.
3 years ago
Roger A. Light 11cb25ee00 Fuzzing: utf8, pub, and sub checks. 3 years ago
Roger A. Light 7adf77e966 Fix crash on exit.
This only occurs when the broker is exiting anyway.

Fixes oss-fuzz #55820.
3 years ago
Roger A. Light 1df253e4e3 Fix case where mixed default/non-default listener config could crash.
This effects only very unusual configs, and would cause a crash on
startup. It is not a security concern.

Fixes oss-fuzz #55886.
3 years ago
Roger A. Light be688e883b Clear memory before use 3 years ago
Roger A. Light ca04ef32f5 Cleanup config on error. 3 years ago
Roger A. Light b50402c838 Cleanup config after --test-config 3 years ago
Roger A. Light b2c566976d Fuzzing: Broker config file testing. 3 years ago
Roger A. Light da723c373b Fix db_dump crash on corrupt file.
Closes oss-fuzz #55789
3 years ago
Roger A. Light d8bc5df102 Fuzzing: db_dump alternate option fuzz targets 3 years ago
Roger A. Light 8c98a6ded4 Fix broker fuzz config.
Closes oss-fuzz #55733.

This is a fuzz target only bug.
3 years ago
Roger A. Light 30d8d2ba6b Fix leak on error.
Closes oss-fuzz #55723.

This was a leak on a failure case which would have caused the program to
terminate.
3 years ago
Roger A. Light c8e1cd963a Fix leak on error 3 years ago
Roger A. Light b0f8f244a3 Fix leak on error 3 years ago
Roger A. Light d76e8de1bd Limit persistence property length 3 years ago
Roger A. Light a7026d06ae Limit persistence property length 3 years ago
Roger A. Light 1c82fd2fbc Fix leak on error. 3 years ago
Roger A. Light 8bf6cd001a Fix leak on error. 3 years ago
Roger A. Light 5232e041d1 db_dump: Tidy up error reporting. 3 years ago
Roger A. Light 61c9696bec db_dump: Use single corrupt db message path. 3 years ago
Roger A. Light e6890ce298 Restrict payloadlen. 3 years ago
Roger A. Light ab0d0f4afd Restrict payload length when reloading. 3 years ago
Roger A. Light c0b7f54ac1 Fuzzing: db_dump file loading 3 years ago
Roger A. Light 9ef4fde511 Fuzzing: Copy seed corpora to correct location 3 years ago
Roger A. Light b0a55b60c6 Fuzzing: Keep connecting until successful.
If there is a real problem, the fuzz timeout should be invoked.

Fixes oss-fuzz #55667.

This was a bug in the fuzz target only, not in the code being
fuzzed.
3 years ago
Roger A. Light ff8cac9fa7 Test: v5 subscribe with all options set. 3 years ago
Roger A. Light 9738406414 Fix db id generation in case of clock discontinuity.
Thanks to Rebecca Gellman.
3 years ago
Roger A. Light 5fb4b05d8f Support for initial fuzzing through oss-fuzz 3 years ago
Roger A. Light 7c8af215ad Fix building with WITH_CJSON=no 3 years ago