Jiri Daněk created PROTON-2136:
----------------------------------

             Summary: fuzz-connection-driver.c exits with 1 when the engine 
stops accepting additional input
                 Key: PROTON-2136
                 URL: https://issues.apache.org/jira/browse/PROTON-2136
             Project: Qpid Proton
          Issue Type: Test
          Components: proton-c
    Affects Versions: proton-c-0.29.0
            Reporter: Jiri Daněk
            Assignee: Jiri Daněk


{noformat}
size_t fcd_read(pn_connection_driver_t *driver, uint8_t **data, size_t *size) {
  pn_rwbytes_t buf = pn_connection_driver_read_buffer(driver);
  size_t s = (*size < buf.size) ? *size : buf.size;
  if (buf.start == NULL) {
    exit(1);
  }
{noformat}

The engine offers a null buffer for further input. AFAIK that is legit, because 
it is just that the "socket" was closed for further input, after reading the 
invalid header.

The fuzz target should just return peacefully at this point and not crash.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to