| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System.Buffers; |
| | | 5 | | using System.Net.Security; |
| | | 6 | | using System.Security.Authentication; |
| | | 7 | | |
| | | 8 | | namespace DotnetFuzzing.Fuzzers |
| | | 9 | | { |
| | | 10 | | internal sealed class SslStreamClientHelloFuzzer : IFuzzer |
| | | 11 | | { |
| | 0 | 12 | | public string[] TargetAssemblies => ["System.Net.Security"]; |
| | | 13 | | |
| | 0 | 14 | | public string[] TargetCoreLibPrefixes => []; |
| | | 15 | | |
| | | 16 | | public void FuzzTarget(ReadOnlySpan<byte> bytes) |
| | 0 | 17 | | { |
| | 0 | 18 | | byte[] buffer = ArrayPool<byte>.Shared.Rent(bytes.Length); |
| | | 19 | | try |
| | 0 | 20 | | { |
| | 0 | 21 | | bytes.CopyTo(buffer); |
| | 0 | 22 | | using MemoryStream ms = new MemoryStream(buffer, 0, bytes.Length); |
| | 0 | 23 | | using SslStream sslStream = new SslStream(ms); |
| | 0 | 24 | | sslStream.AuthenticateAsServerAsync((stream, clientHelloInfo, b, token) => |
| | 0 | 25 | | { |
| | 0 | 26 | | // This callback should be called when ClientHello is |
| | 0 | 27 | | // received, Since we don't parse any other TLS messages, |
| | 0 | 28 | | // we can terminate the handshake here. Fuzzing the rest of |
| | 0 | 29 | | // the handshake would fuzz the platform TLS implementation |
| | 0 | 30 | | // which is not instrumented and is out of scope for this |
| | 0 | 31 | | // fuzzer. |
| | 0 | 32 | | throw new MyCustomException(); |
| | 0 | 33 | | }, null).GetAwaiter().GetResult(); |
| | 0 | 34 | | } |
| | 0 | 35 | | catch (Exception ex) when (ex is AuthenticationException or IOException or MyCustomException) |
| | 0 | 36 | | { |
| | 0 | 37 | | } |
| | | 38 | | finally |
| | 0 | 39 | | { |
| | 0 | 40 | | ArrayPool<byte>.Shared.Return(buffer); |
| | 0 | 41 | | } |
| | 0 | 42 | | } |
| | | 43 | | |
| | | 44 | | internal class MyCustomException : Exception |
| | | 45 | | { |
| | | 46 | | } |
| | | 47 | | } |
| | | 48 | | } |