| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System.Buffers; |
| | | 5 | | using System.Net; |
| | | 6 | | using System.Net.Sockets; |
| | | 7 | | using System.Runtime.InteropServices; |
| | | 8 | | using System.Text; |
| | | 9 | | using System.Text.Unicode; |
| | | 10 | | |
| | | 11 | | namespace DotnetFuzzing.Fuzzers |
| | | 12 | | { |
| | | 13 | | internal sealed class IPAddressFuzzer : IFuzzer |
| | | 14 | | { |
| | 0 | 15 | | public string[] TargetAssemblies => ["System.Net.Primitives", "System.Private.Uri"]; |
| | 0 | 16 | | public string[] TargetCoreLibPrefixes => []; |
| | | 17 | | |
| | | 18 | | public void FuzzTarget(ReadOnlySpan<byte> bytes) |
| | 1148 | 19 | | { |
| | 1148 | 20 | | using var poisonedBytes = PooledBoundedMemory<byte>.Rent(bytes, PoisonPagePlacement.After); |
| | 1148 | 21 | | using var poisonedChars = PooledBoundedMemory<char>.Rent(MemoryMarshal.Cast<byte, char>(bytes), PoisonPagePl |
| | | 22 | | |
| | 1148 | 23 | | if (IPAddress.IsValidUtf8(poisonedBytes.Span)) |
| | 566 | 24 | | { |
| | 566 | 25 | | TestValidInput(bytes: poisonedBytes.Span); |
| | 566 | 26 | | } |
| | | 27 | | else |
| | 582 | 28 | | { |
| | 582 | 29 | | Assert.False(IPAddress.TryParse(poisonedBytes.Span, out _)); |
| | 582 | 30 | | } |
| | | 31 | | |
| | 1148 | 32 | | if (IPAddress.IsValid(poisonedChars.Span)) |
| | 9 | 33 | | { |
| | 9 | 34 | | TestValidInput(chars: poisonedChars.Span.ToString()); |
| | 9 | 35 | | } |
| | | 36 | | else |
| | 1139 | 37 | | { |
| | 1139 | 38 | | Assert.False(IPAddress.TryParse(poisonedChars.Span, out _)); |
| | 1139 | 39 | | } |
| | | 40 | | |
| | | 41 | | static void TestValidInput(ReadOnlySpan<byte> bytes = default, string? chars = null) |
| | 575 | 42 | | { |
| | 575 | 43 | | if (chars is null) |
| | 566 | 44 | | { |
| | | 45 | | // bytes past the '%' may not be valid UTF-8: https://github.com/dotnet/runtime/issues/111288 |
| | 566 | 46 | | int percentIndex = bytes.IndexOf((byte)'%'); |
| | 566 | 47 | | Assert.True(Utf8.IsValid(bytes.Slice(0, percentIndex < 0 ? bytes.Length : percentIndex))); |
| | | 48 | | |
| | 566 | 49 | | chars = Encoding.UTF8.GetString(bytes); |
| | 566 | 50 | | } |
| | | 51 | | else |
| | 9 | 52 | | { |
| | 9 | 53 | | bytes = Encoding.UTF8.GetBytes(chars); |
| | 9 | 54 | | } |
| | | 55 | | |
| | 575 | 56 | | Assert.True(IPAddress.IsValid(chars)); |
| | 575 | 57 | | Assert.True(IPAddress.TryParse(chars, out IPAddress? ipFromChars)); |
| | 575 | 58 | | Assert.True(IPAddress.TryParse(bytes, out IPAddress? ipFromBytes)); |
| | | 59 | | |
| | 575 | 60 | | Assert.True(ipFromChars.Equals(ipFromBytes)); |
| | 575 | 61 | | Assert.True(ipFromBytes.Equals(ipFromChars)); |
| | | 62 | | |
| | 575 | 63 | | Assert.True(IPAddress.IsValid(ipFromChars.ToString())); |
| | | 64 | | |
| | 575 | 65 | | TestUri(chars); |
| | 575 | 66 | | } |
| | | 67 | | |
| | | 68 | | static void TestUri(string chars) |
| | 575 | 69 | | { |
| | 575 | 70 | | bool isIpv6 = chars.Contains(':'); |
| | 575 | 71 | | UriHostNameType hostNameType = isIpv6 ? UriHostNameType.IPv6 : UriHostNameType.IPv4; |
| | | 72 | | |
| | 575 | 73 | | if (isIpv6) |
| | 470 | 74 | | { |
| | | 75 | | // Remove the ScopeId |
| | 470 | 76 | | int percentIndex = chars.IndexOf('%'); |
| | 470 | 77 | | if (percentIndex >= 0) |
| | 116 | 78 | | { |
| | 116 | 79 | | chars = chars.Substring(0, percentIndex); |
| | 116 | 80 | | if (chars.StartsWith('[')) |
| | 34 | 81 | | { |
| | 34 | 82 | | chars = $"{chars}]"; |
| | 34 | 83 | | } |
| | 116 | 84 | | } |
| | | 85 | | |
| | 470 | 86 | | if (!chars.StartsWith('[')) |
| | 412 | 87 | | { |
| | 412 | 88 | | chars = $"[{chars}]"; |
| | 412 | 89 | | } |
| | | 90 | | |
| | | 91 | | // Remove the port |
| | 470 | 92 | | int bracketIndex = chars.IndexOf(']'); |
| | 470 | 93 | | if (bracketIndex >= 0 && |
| | 470 | 94 | | bracketIndex + 1 < chars.Length && |
| | 470 | 95 | | chars[bracketIndex + 1] == ':') |
| | 22 | 96 | | { |
| | 22 | 97 | | chars = chars.Substring(0, bracketIndex + 1); |
| | 22 | 98 | | } |
| | 470 | 99 | | } |
| | | 100 | | |
| | 575 | 101 | | Assert.True(Uri.TryCreate($"http://{chars}/", UriKind.Absolute, out Uri? uri)); |
| | 575 | 102 | | Assert.Equal(hostNameType, uri.HostNameType); |
| | 575 | 103 | | Assert.Equal(hostNameType, Uri.CheckHostName(chars)); |
| | 575 | 104 | | } |
| | 2296 | 105 | | } |
| | | 106 | | } |
| | | 107 | | } |