[patch] fwknop-2.6.4-disable-IP-resolution-in-AFL_FUZZING-mode.patch

fwknop-2.6.4-disable-IP-resolution-in-AFL_FUZZING-mode.patch (text/plain), 1.45 KB, created by Coacher on 2014-11-19 15:40:22 UTC

From 22289a3f58278d13a36249efc18809da92fb4309 Mon Sep 17 00:00:00 2001
From: Michael Rash <[e-mail]>
Date: Tue, 18 Nov 2014 20:16:12 -0500
Subject: [PATCH] [client] disable IP resolution in AFL_FUZZING mode

---
 client/config_init.c | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/client/config_init.c b/client/config_init.c
index e4c0958..5b62a02 100644
--- a/client/config_init.c
+++ b/client/config_init.c
@@ -1824,6 +1824,14 @@ validate_options(fko_cli_options_t *options)
                 log_msg(LOG_VERBOSITY_WARNING,
                     "[-] WARNING: Should use -a or -R to harden SPA against potential MITM attacks");
             }
+        }
+
+        /* Make sure -a overrides IP resolution
+        */
+        if(options->allow_ip_str[0] != 0x0
+                && strncasecmp(options->allow_ip_str, "resolve", strlen("resolve")) != 0)
+        {
+            options->resolve_ip_http_https = 1;
 
             if(! is_valid_ipv4_addr(options->allow_ip_str))
             {
@@ -1856,6 +1864,12 @@ validate_options(fko_cli_options_t *options)
             snprintf(options->http_user_agent, HTTP_MAX_USER_AGENT_LEN,
                 "%s%s", "Fwknop/", MY_VERSION);
 
+#if AFL_FUZZING
+    /* Don't issue IP resolution requests in AFL fuzzing mode
+    */
+    options->resolve_ip_http_https = 0;
+#endif
+
     if(options->http_proxy[0] != 0x0 && options->spa_proto != FKO_PROTO_HTTP)
     {
         log_msg(LOG_VERBOSITY_ERROR,
-- 
2.0.4