samba.git/lib/fuzzing/wscript_build, branch talloc-2.4.2

lib/fuzzing: Fix code spelling

2023-12-08T02:28:33+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

lib/fuzzing: fuzz_conditional_ace_blob

2023-09-26T23:45:35+00:00

This parses the blob as a conditional ACE, and if possible tries
decompiling it into SDDL.

There are not many round-trip assertions we can honestly make, but we
keep the trip going as long as possible, in case it reveals anything.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

fuzz: add fuzzer for ldb_comparison_fold

2023-08-08T04:39:39+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

fuzz: add fuzzer for sess_crypt_blob

2023-08-08T04:39:39+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

librpc/idl: Remove DCOM and WMI IDL

2023-07-28T10:48:32+00:00

As hinted in f2416493c0c779356606aebf0aceca8fa416b55c the DCOM and WMI
IDL is now unused.  These generate code with PIDL, costing a small
amount of build time but more importantly are fuzzed, which costs an
ongoing amount of CPU time as oss-fuzz tries to find parsing issues.

We do not need to continue this waste, and these can be restored
if this effort is ever to start again.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

lib/fuzzing: adapt fuzz_sddl_access_check for AD variant

2023-07-19T03:31:30+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

lib/fuzzing: adapt fuzz_security_token_vs_descriptor for AD variant

2023-07-19T03:31:30+00:00

This of course doesn't exercise the object tree or default SID code,
but it still covers a lot to the *_ds access_check functions.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

lib/fuzzing: add fuzzer for arbitrary token/sd access checks

2023-07-19T03:31:30+00:00

The token and descriptor are stored in NDR format; for this purpose we
add a new IDL struct containing this pair (along with a desired access
mask).

An upcoming commit will show how to collect seeds for this fuzzer.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

lib/fuzzing: add fuzz_sddl_access_check

2023-07-19T03:31:30+00:00

This fuzzer parses SDDL into a security descriptor and runs an access
check on it using a known security token. This is purely for crash
detection -- we don't know enough to assert whether the check should
succeed or not.

The seed strings used are compatible with those of fuzz_sddl_parse --
anything found by fuzz_sddl_parse is worth trying as a seed here, and
vice versa.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

lib/fuzzing: add fuzzer for sddl_parse

2023-04-28T02:15:36+00:00

Apart from catching crashes in the actual parsing, we abort if the SD
we end up with will not round trip back through SDDL to an identical
SD.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett