fuzzing.h 896 B

12345678910111213141516171819202122232425262728293031323334
  1. #pragma once
  2. #include "defines.h"
  3. #include <tcpedit/tcpedit_types.h>
  4. #include <stdint.h>
  5. #include <stdlib.h>
  6. enum {
  7. FUZZING_DROP_PACKET,
  8. FUZZING_REDUCE_SIZE,
  9. FUZZING_CHANGE_START_ZERO,
  10. FUZZING_CHANGE_START_RANDOM,
  11. FUZZING_CHANGE_START_FF,
  12. FUZZING_CHANGE_MID_ZERO,
  13. FUZZING_CHANGE_MID_RANDOM, /* the default case */
  14. FUZZING_CHANGE_MID_FF,
  15. FUZZING_CHANGE_END_ZERO,
  16. FUZZING_CHANGE_END_RANDOM,
  17. FUZZING_CHANGE_END_FF,
  18. FUZZING_TOTAL_ACTION_NUMBER /* always last */
  19. };
  20. /**
  21. * init fuzz seed and allocate buffer.
  22. */
  23. void fuzzing_init(uint32_t _fuzz_seed, uint32_t _fuzz_factor);
  24. /*
  25. * fuzz packet data.
  26. * only one out of 8 packets are fuzzed.
  27. * fuzzed packets get one random modification from the enum above.
  28. * Returns whether the packet has been modified (1, or 0)
  29. */
  30. int fuzzing(tcpedit_t *tcpedit, struct pcap_pkthdr *pkthdr, u_char **pktdata);