[pw_fuzzer] Adding a FuzzTest for fuzzing PASE #36171
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Review changes with SemanticDiff. |
|
PR #36171: Size comparison from d7abcbf to da8515c Full report (67 builds for bl602, bl702, bl702l, cc13x4_26x4, cc32xx, cyw30739, efr32, esp32, linux, nrfconnect, nxp, psoc6, qpg, stm32, telink, tizen)
|
andy31415
approved these changes
Oct 23, 2024
yyzhong-g
pushed a commit
to yyzhong-g/connectedhomeip
that referenced
this pull request
Dec 12, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
LoopbackMessageContextfrom Unit Tests to simulate having both theInitiatorandResponderon the same device with their messaging and network layers.PASESession_Bounded: we fuzz the setup passcode, salt and PBKDF2 Iteration Count, generate a s pake2+ verifier from fuzzed inputs, and then attempt PASE Session Pairing. PASE Session Pairing should always succeed since fuzzed inputs are within expected boundaries.PASESession_Unbounded: Same as above, except that the fuzzed inputs are not within the expected bounds --> Pairing is not expected to be successful.FuzzSpake2pVerifier: we are fuzzing the Spake2pVerifier directly, and then attempting PASE Pairing --> Pairing is not expected to pass here since Spake2pVerifier is not derived from the passcode.Spake2pVerifier_Serialize_RoundTrip: RoundTrip fuzzing of the Spake2pVerifier Serialize and Deserialize Functions.Testing
./scripts/build/build_examples.py --target linux-x64-tests-clang-pw-fuzztest build #to run all fuzztest for a few iterations out/linux-x64-tests-clang-pw-fuzztest/chip_pw_fuzztest/tests/fuzz-PASE-pwWIP: Refactoring supporting classes into Fixtures, once #35369 is resolved
Note: The Test
PASESession_Unboundedwill crash before the following PR is integrated: #36160