You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
hostap/tests/fuzzing
Jouni Malinen 7d2ed8bae8 Remove CONFIG_IEEE80211W build parameter
Hardcode this to be defined and remove the separate build options for
PMF since this functionality is needed with large number of newer
protocol extensions and is also something that should be enabled in all
WPA2/WPA3 networks.

Signed-off-by: Jouni Malinen <j@w1.fi>
5 years ago
..
ap-mgmt tests: Fix ap-mgmt 'make clean' 5 years ago
asn1 tests: New style fuzzing tool for ASN.1 parser 5 years ago
eap-aka-peer Replace EapType typedef with enum eap_type 5 years ago
eap-sim-peer Replace EapType typedef with enum eap_type 5 years ago
eapol-key-auth Remove CONFIG_IEEE80211W build parameter 5 years ago
eapol-key-supp Remove CONFIG_IEEE80211W build parameter 5 years ago
eapol-supp tests: New style fuzzing tool for EAPOL frame processing (supplicant) 5 years ago
json tests: New style fuzzing tool for JSON parser 5 years ago
p2p tests: New style fuzzing tool for P2P frame processing 5 years ago
tls-client tests: New style fuzzing tools for TLS client/server 5 years ago
tls-server tests: New style fuzzing tools for TLS client/server 5 years ago
wnm tests: New style fuzzing tool for wpa_supplicant WNM handling 5 years ago
x509 tests: Add X.509v3 parsing example with invalid BasicConstraints 5 years ago
README tests: New style fuzzing tool for wpa_supplicant WNM handling 5 years ago
build-test.sh tests: Build test for new fuzzer tools 5 years ago
fuzzer-common.c tests: New style fuzzing tool for wpa_supplicant WNM handling 5 years ago
fuzzer-common.h tests: New style fuzzing tool for wpa_supplicant WNM handling 5 years ago
rules.include tests: Fix CFLAGS passing for new fuzzing tools 5 years ago

README

hostap.git fuzz testing
-----------------------

These tools can be used for fuzz testing of various components used
within wpa_supplicant and hostapd. Each directory contains a fuzzing
tool that focuses on one input handler. Each tool can be compiled either
to work with the libFuzzer or as a separate tool that reads the input
from a file specified on the command line, e.g., for American fuzzy lop
(afl-fuzz). Example test corpus is included in */corpus directory.

Example fuzzing with libFuzzer

cd @TOOL@
make clean
make LIBFUZZER=y
./@TOOL@ corpus

Example fuzzing with afl-fuzz

cd @TOOL@
make clean
CC=afl-gcc make
afl-fuzz -i corpus -o findings -- $PWD/@TOOL@ @@