You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
But this means randval will never actually be S2N_SERIALIZED_FORMAT_TLS12_V3.
My preferred solution is to completely remove the manual input setting. I expect that libfuzzer (with a nice corpus) will be able to find all branches.
Requirements / Acceptance Criteria:
add fuzz test coverage of S2N_SERIALIZED_FORMAT_TLS12_V3.
generate fuzz test coverage locally to confirm that the function is covered.
The text was updated successfully, but these errors were encountered:
Problem:
Thanks to the work in #4960 , we can see that the de-serialization logic for
S2N_SERIALIZED_FORMAT_TLS12_V3
is not currently being fuzz tested.Solution:
We manually set the first byte of the session ticket using the modulus operator
s2n-tls/tests/fuzz/s2n_deserialize_resumption_state_test.c
Lines 47 to 48 in aaae641
But this means
randval
will never actually beS2N_SERIALIZED_FORMAT_TLS12_V3
.My preferred solution is to completely remove the manual input setting. I expect that libfuzzer (with a nice corpus) will be able to find all branches.
Requirements / Acceptance Criteria:
S2N_SERIALIZED_FORMAT_TLS12_V3
.The text was updated successfully, but these errors were encountered: