ASN1_parse fuzzing

Author: skmcgrail

fuzz/CMakeLists.txt

@@ -15,6 +15,7 @@ macro(fuzzer name)
   add_dependencies(all_fuzz_tests ${name})
 endmacro()
 
+fuzzer(asn1parse)
 fuzzer(arm_cpuinfo)
 fuzzer(bn_div)
 fuzzer(bn_mod_exp)

fuzz/asn1parse.cc

@@ -0,0 +1,16 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0 OR ISC
+
+#include <openssl/asn1.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <openssl/mem.h>
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len) {
+  bssl::UniquePtr<BIO> bio(BIO_new(BIO_s_mem()));
+  if(len > LONG_MAX) {
+    return 0;
+  }
+  ASN1_parse(bio.get(), buf, len, 0);
+  return 0;
+}

fuzz/asn1parse_corpus/007dd9b9b6f1fe30c650ee7988643e98436c23da

@@ -0,0 +1 @@
+�

fuzz/asn1parse_corpus/00b28ff06b788b9b67c6b259800f404f9f3761fd

@@ -0,0 +1,3 @@
+
+
+

fuzz/asn1parse_corpus/00e102d4eb2ba6eb94188164b1193fcb9adc4592

@@ -0,0 +1 @@
+��