diff options
Diffstat (limited to 'test/fuzz/device/net_ncm/Makefile')
| -rw-r--r-- | test/fuzz/device/net_ncm/Makefile | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/test/fuzz/device/net_ncm/Makefile b/test/fuzz/device/net_ncm/Makefile new file mode 100644 index 000000000..df5a61324 --- /dev/null +++ b/test/fuzz/device/net_ncm/Makefile @@ -0,0 +1,43 @@ +# Focused fuzz harness for the NCM receive path (recv_validate_datagram). +# +# It is self-contained: it #includes src/class/net/ncm_device.c and stubs the +# few usbd/glue symbols, so it does not link the whole device stack. +# +# make # build the libFuzzer target: _build/net_ncm +# make regression # build + replay the crafted seed under ASan (no engine) +# make clean + +TOP := ../../../.. +BUILD := _build + +CC ?= clang + +INC += \ + $(TOP)/src \ + . + +CFLAGS += $(addprefix -I,$(INC)) -g -O1 -fsanitize=address + +FUZZ_FLAGS := -fsanitize=fuzzer + +.PHONY: all regression clean get-deps + +all: $(BUILD)/net_ncm + +# No external dependencies (the harness only needs the in-tree NCM driver). +get-deps: + +# libFuzzer supplies its own main(), so drop the standalone driver here. +$(BUILD)/net_ncm: fuzz.c + mkdir -p $(@D) + $(CC) $(CFLAGS) $(FUZZ_FLAGS) -DNO_MAIN -o $@ $< + +# Standalone build with a plain main(): replays the crafted seed and any extra +# corpus files given as arguments. Used as a deterministic regression. +regression: fuzz.c + mkdir -p $(BUILD) + $(CC) $(CFLAGS) -o $(BUILD)/net_ncm_regression $< + ./$(BUILD)/net_ncm_regression + +clean: + $(RM) -rf $(BUILD) *.dSYM |