tinyusb.git/test/fuzz/device/net_ncm, branch hil-reportUnnamed repository; edit this file 'description' to name the repository.http://cgit.235523.xyz/tinyusb.git/atom/test/fuzz/device/net_ncm?h=hil-report2026-08-07T06:42:32Ztest/fuzz: stub usbd_defer_func in net_ncm harness2026-08-07T06:42:32ZCedric Van den Berghcedric.vandenbergh@morsemicro.com2026-07-08T14:04:35Zurn:sha1:d0f8c75edd3f6f05792976dbdbb0bc21f4d8ed39
The self-contained net_ncm fuzz harness #includes ncm_device.c and stubs
the usbd symbols it references rather than linking the device stack.
tud_network_link_state() now calls usbd_defer_func(), so add a matching
no-op stub to keep the harness linking.
clamped copied length to n2026-07-05T10:45:55ZHiFiPhileadmin@hifiphile.com2026-07-05T10:45:55Zurn:sha1:2d5f5c0cf2ae992234fff826f95c3a24daff223a
Signed-off-by: HiFiPhile <admin@hifiphile.com>
fix ci2026-07-05T10:35:03ZHiFiPhileadmin@hifiphile.com2026-07-05T10:35:03Zurn:sha1:6563ef3b2775317008962153abb20fbe727f41f2
Signed-off-by: HiFiPhile <admin@hifiphile.com>
add ncm receive-path fuzz harness with out-of-bounds seed2026-07-03T17:46:28ZJavid Khandxbjavid@gmail.com2026-07-03T17:46:28Zurn:sha1:3439e9c8de046ed7f8a5a89338a57b9f0f9358b8
folds the reproducer for the recv_validate_datagram bound into a small
self-contained fuzz target. it feeds a raw ntb straight into the validator
(the driver is pulled in so the static function is reachable) and ships the
crafted 64-byte ntb as a seed. the seed trips an asan heap-buffer-overflow
against the unpatched driver and is rejected cleanly with the wLength bound
in place.