summaryrefslogtreecommitdiff
path: root/test/fuzz/device/net_ncm/fuzz.c
AgeCommit message (Collapse)Author
2026-07-05clamped copied length to nHiFiPhile
Signed-off-by: HiFiPhile <[email protected]>
2026-07-03add ncm receive-path fuzz harness with out-of-bounds seedJavid Khan
folds the reproducer for the recv_validate_datagram bound into a small self-contained fuzz target. it feeds a raw ntb straight into the validator (the driver is pulled in so the static function is reachable) and ships the crafted 64-byte ntb as a seed. the seed trips an asan heap-buffer-overflow against the unpatched driver and is rejected cleanly with the wLength bound in place.