diff options
| author | Javid Khan <[email protected]> | 2026-07-03 23:16:28 +0530 |
|---|---|---|
| committer | Javid Khan <[email protected]> | 2026-07-03 23:16:28 +0530 |
| commit | 3439e9c8de046ed7f8a5a89338a57b9f0f9358b8 (patch) | |
| tree | 04c3b764aabcda90f957166af8714c4390972b54 /src | |
| parent | 02ffd90a9fbc71a126bb9633686150b0a6399b19 (diff) | |
add ncm receive-path fuzz harness with out-of-bounds seed
folds the reproducer for the recv_validate_datagram bound into a small
self-contained fuzz target. it feeds a raw ntb straight into the validator
(the driver is pulled in so the static function is reachable) and ships the
crafted 64-byte ntb as a seed. the seed trips an asan heap-buffer-overflow
against the unpatched driver and is rejected cleanly with the wLength bound
in place.
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions
