Coverage Report

Created: 2025-03-18 19:34

/root/bitcoin/src/test/fuzz/pcp.cpp
Line
Count
Source (jump to first uncovered line)
1
// Copyright (c) 2024 The Bitcoin Core developers
2
// Distributed under the MIT software license, see the accompanying
3
// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5
#include <test/fuzz/FuzzedDataProvider.h>
6
#include <test/fuzz/fuzz.h>
7
#include <test/fuzz/util.h>
8
#include <test/fuzz/util/net.h>
9
10
#include <common/pcp.h>
11
#include <util/check.h>
12
13
using namespace std::literals;
14
15
//! Fixed nonce to use in PCP port mapping requests.
16
constexpr PCPMappingNonce PCP_NONCE{0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xaa, 0xbb, 0xcc};
17
18
//! Number of attempts to request a NAT-PMP or PCP port mapping to the gateway.
19
constexpr int NUM_TRIES{5};
20
21
//! Timeout for each attempt to request a port mapping.
22
constexpr std::chrono::duration TIMEOUT{100ms};
23
24
void port_map_target_init()
25
0
{
26
0
    LogInstance().DisableLogging();
27
0
}
28
29
FUZZ_TARGET(pcp_request_port_map, .init = port_map_target_init)
30
0
{
31
0
    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
32
33
    // Create a mocked socket between random (and potentially invalid) client and gateway addresses.
34
0
    CreateSock = [&](int domain, int type, int protocol) {
35
0
        if ((domain == AF_INET || domain == AF_INET6) && type == SOCK_DGRAM && protocol == IPPROTO_UDP) {
  Branch (35:14): [True: 0, False: 0]
  Branch (35:35): [True: 0, False: 0]
  Branch (35:58): [True: 0, False: 0]
  Branch (35:80): [True: 0, False: 0]
36
0
            return std::make_unique<FuzzedSock>(fuzzed_data_provider);
37
0
        }
38
0
        return std::unique_ptr<FuzzedSock>();
39
0
    };
40
41
    // Perform the port mapping request. The mocked socket will return fuzzer-provided data.
42
0
    const auto gateway_addr{ConsumeNetAddr(fuzzed_data_provider)};
43
0
    const auto local_addr{ConsumeNetAddr(fuzzed_data_provider)};
44
0
    const auto port{fuzzed_data_provider.ConsumeIntegral<uint16_t>()};
45
0
    const auto lifetime{fuzzed_data_provider.ConsumeIntegral<uint32_t>()};
46
0
    const auto res{PCPRequestPortMap(PCP_NONCE, gateway_addr, local_addr, port, lifetime, NUM_TRIES, TIMEOUT)};
47
48
    // In case of success the mapping must be consistent with the request.
49
0
    if (const MappingResult* mapping = std::get_if<MappingResult>(&res)) {
  Branch (49:30): [True: 0, False: 0]
50
0
        Assert(mapping);
51
0
        Assert(mapping->internal.GetPort() == port);
52
0
        mapping->ToString();
53
0
    }
54
0
}
55
56
FUZZ_TARGET(natpmp_request_port_map, .init = port_map_target_init)
57
0
{
58
0
    FuzzedDataProvider fuzzed_data_provider{buffer.data(), buffer.size()};
59
60
    // Create a mocked socket between random (and potentially invalid) client and gateway addresses.
61
0
    CreateSock = [&](int domain, int type, int protocol) {
62
0
        if (domain == AF_INET && type == SOCK_DGRAM && protocol == IPPROTO_UDP) {
  Branch (62:13): [True: 0, False: 0]
  Branch (62:34): [True: 0, False: 0]
  Branch (62:56): [True: 0, False: 0]
63
0
            return std::make_unique<FuzzedSock>(fuzzed_data_provider);
64
0
        }
65
0
        return std::unique_ptr<FuzzedSock>();
66
0
    };
67
68
    // Perform the port mapping request. The mocked socket will return fuzzer-provided data.
69
0
    const auto gateway_addr{ConsumeNetAddr(fuzzed_data_provider)};
70
0
    const auto port{fuzzed_data_provider.ConsumeIntegral<uint16_t>()};
71
0
    const auto lifetime{fuzzed_data_provider.ConsumeIntegral<uint32_t>()};
72
0
    const auto res{NATPMPRequestPortMap(gateway_addr, port, lifetime, NUM_TRIES, TIMEOUT)};
73
74
    // In case of success the mapping must be consistent with the request.
75
0
    if (const MappingResult* mapping = std::get_if<MappingResult>(&res)) {
  Branch (75:30): [True: 0, False: 0]
76
0
        Assert(mapping);
77
0
        Assert(mapping->internal.GetPort() == port);
78
0
        mapping->ToString();
79
0
    }
80
0
}