Symbol: fuzz
regress/sbin/iked/parser/test_parser_fuzz.c
445
perform_test(struct fuzz *fuzz)
regress/sbin/iked/parser/test_parser_fuzz.c
454
for (; !fuzz_done(fuzz); fuzz_next(fuzz)) {
regress/sbin/iked/parser/test_parser_fuzz.c
455
ASSERT_PTR_NE(fuzzed = ibuf_new(fuzz_ptr(fuzz), fuzz_len(fuzz)),
regress/sbin/iked/parser/test_parser_fuzz.c
477
struct fuzz *fuzz;
regress/sbin/iked/parser/test_parser_fuzz.c
493
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
499
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
512
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
518
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
531
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
537
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
550
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
556
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
569
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
575
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
588
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
594
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
607
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
613
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
626
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
632
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
645
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
651
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
664
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
670
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
683
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
689
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
702
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
708
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
721
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
727
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
740
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
746
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
759
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
765
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
778
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
784
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
797
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
803
perform_test(fuzz);
regress/sbin/iked/parser/test_parser_fuzz.c
814
fuzz = fuzz_begin(FUZZ_1_BIT_FLIP | FUZZ_2_BIT_FLIP |
regress/sbin/iked/parser/test_parser_fuzz.c
820
perform_test(fuzz);
regress/sbin/iked/test_helper/fuzz.c
100
switch (fuzz->strategy) {
regress/sbin/iked/test_helper/fuzz.c
103
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
104
fuzz->o1, fuzz->slen * 8, fuzz->o1);
regress/sbin/iked/test_helper/fuzz.c
108
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
109
(((fuzz_ullong)fuzz->o2) * fuzz->slen * 8) + fuzz->o1,
regress/sbin/iked/test_helper/fuzz.c
110
((fuzz_ullong)fuzz->slen * 8) * fuzz->slen * 8,
regress/sbin/iked/test_helper/fuzz.c
111
fuzz->o1, fuzz->o2);
regress/sbin/iked/test_helper/fuzz.c
115
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
116
fuzz->o1, fuzz->slen, fuzz->o1);
regress/sbin/iked/test_helper/fuzz.c
120
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
121
(((fuzz_ullong)fuzz->o2) * fuzz->slen) + fuzz->o1,
regress/sbin/iked/test_helper/fuzz.c
122
((fuzz_ullong)fuzz->slen) * fuzz->slen,
regress/sbin/iked/test_helper/fuzz.c
123
fuzz->o1, fuzz->o2);
regress/sbin/iked/test_helper/fuzz.c
127
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
128
fuzz->o1, fuzz->slen, fuzz->o1);
regress/sbin/iked/test_helper/fuzz.c
132
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
133
fuzz->o1, fuzz->slen, fuzz->o1);
regress/sbin/iked/test_helper/fuzz.c
136
assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1);
regress/sbin/iked/test_helper/fuzz.c
138
fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
139
(fuzz->o1 * (fuzz_ullong)64) + fuzz->o2,
regress/sbin/iked/test_helper/fuzz.c
140
fuzz->slen * (fuzz_ullong)64, fuzz->o1,
regress/sbin/iked/test_helper/fuzz.c
141
fuzz_b64chars[fuzz->o2]);
regress/sbin/iked/test_helper/fuzz.c
147
fprintf(stderr, "fuzz context %p len = %zu\n", fuzz, len);
regress/sbin/iked/test_helper/fuzz.c
169
struct fuzz *
regress/sbin/iked/test_helper/fuzz.c
172
struct fuzz *ret = calloc(sizeof(*ret), 1);
regress/sbin/iked/test_helper/fuzz.c
192
fuzz_cleanup(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
194
FUZZ_DBG(("cleanup, fuzz = %p", fuzz));
regress/sbin/iked/test_helper/fuzz.c
195
assert(fuzz != NULL);
regress/sbin/iked/test_helper/fuzz.c
196
assert(fuzz->seed != NULL);
regress/sbin/iked/test_helper/fuzz.c
197
assert(fuzz->fuzzed != NULL);
regress/sbin/iked/test_helper/fuzz.c
198
free(fuzz->seed);
regress/sbin/iked/test_helper/fuzz.c
199
free(fuzz->fuzzed);
regress/sbin/iked/test_helper/fuzz.c
200
free(fuzz);
regress/sbin/iked/test_helper/fuzz.c
204
fuzz_strategy_done(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
207
fuzz, fuzz_ntop(fuzz->strategy), fuzz->o1, fuzz->o2, fuzz->slen));
regress/sbin/iked/test_helper/fuzz.c
209
switch (fuzz->strategy) {
regress/sbin/iked/test_helper/fuzz.c
211
return fuzz->o1 >= fuzz->slen * 8;
regress/sbin/iked/test_helper/fuzz.c
213
return fuzz->o2 >= fuzz->slen * 8;
regress/sbin/iked/test_helper/fuzz.c
215
return fuzz->o2 >= fuzz->slen;
regress/sbin/iked/test_helper/fuzz.c
220
return fuzz->o1 >= fuzz->slen;
regress/sbin/iked/test_helper/fuzz.c
227
fuzz_next(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
232
"o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
233
(u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen));
regress/sbin/iked/test_helper/fuzz.c
235
if (fuzz->strategy == 0 || fuzz_strategy_done(fuzz)) {
regress/sbin/iked/test_helper/fuzz.c
237
if (fuzz->fuzzed == NULL) {
regress/sbin/iked/test_helper/fuzz.c
239
fuzz->fuzzed = calloc(fuzz->slen, 1);
regress/sbin/iked/test_helper/fuzz.c
244
if ((fuzz->strategies & i) != 0) {
regress/sbin/iked/test_helper/fuzz.c
245
fuzz->strategy = i;
regress/sbin/iked/test_helper/fuzz.c
249
FUZZ_DBG(("selected = %u", fuzz->strategy));
regress/sbin/iked/test_helper/fuzz.c
250
if (fuzz->strategy == 0) {
regress/sbin/iked/test_helper/fuzz.c
254
fuzz->strategies &= ~(fuzz->strategy);
regress/sbin/iked/test_helper/fuzz.c
255
fuzz->o1 = fuzz->o2 = 0;
regress/sbin/iked/test_helper/fuzz.c
258
assert(fuzz->fuzzed != NULL);
regress/sbin/iked/test_helper/fuzz.c
260
switch (fuzz->strategy) {
regress/sbin/iked/test_helper/fuzz.c
262
assert(fuzz->o1 / 8 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
263
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
264
fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8);
regress/sbin/iked/test_helper/fuzz.c
265
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
268
assert(fuzz->o1 / 8 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
269
assert(fuzz->o2 / 8 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
270
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
271
fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8);
regress/sbin/iked/test_helper/fuzz.c
272
fuzz->fuzzed[fuzz->o2 / 8] ^= 1 << (fuzz->o2 % 8);
regress/sbin/iked/test_helper/fuzz.c
273
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
274
if (fuzz->o1 >= fuzz->slen * 8) {
regress/sbin/iked/test_helper/fuzz.c
275
fuzz->o1 = 0;
regress/sbin/iked/test_helper/fuzz.c
276
fuzz->o2++;
regress/sbin/iked/test_helper/fuzz.c
280
assert(fuzz->o1 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
281
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
282
fuzz->fuzzed[fuzz->o1] ^= 0xff;
regress/sbin/iked/test_helper/fuzz.c
283
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
286
assert(fuzz->o1 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
287
assert(fuzz->o2 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
288
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
289
fuzz->fuzzed[fuzz->o1] ^= 0xff;
regress/sbin/iked/test_helper/fuzz.c
290
fuzz->fuzzed[fuzz->o2] ^= 0xff;
regress/sbin/iked/test_helper/fuzz.c
291
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
292
if (fuzz->o1 >= fuzz->slen) {
regress/sbin/iked/test_helper/fuzz.c
293
fuzz->o1 = 0;
regress/sbin/iked/test_helper/fuzz.c
294
fuzz->o2++;
regress/sbin/iked/test_helper/fuzz.c
299
assert(fuzz->o1 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
300
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
301
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
304
assert(fuzz->o1 < fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
305
assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1);
regress/sbin/iked/test_helper/fuzz.c
306
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
307
fuzz->fuzzed[fuzz->o1] = fuzz_b64chars[fuzz->o2];
regress/sbin/iked/test_helper/fuzz.c
308
fuzz->o2++;
regress/sbin/iked/test_helper/fuzz.c
309
if (fuzz->o2 >= sizeof(fuzz_b64chars) - 1) {
regress/sbin/iked/test_helper/fuzz.c
310
fuzz->o2 = 0;
regress/sbin/iked/test_helper/fuzz.c
311
fuzz->o1++;
regress/sbin/iked/test_helper/fuzz.c
319
"o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy),
regress/sbin/iked/test_helper/fuzz.c
320
(u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen));
regress/sbin/iked/test_helper/fuzz.c
324
fuzz_done(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
326
FUZZ_DBG(("fuzz = %p, strategies = 0x%lx", fuzz,
regress/sbin/iked/test_helper/fuzz.c
327
(u_long)fuzz->strategies));
regress/sbin/iked/test_helper/fuzz.c
329
return fuzz_strategy_done(fuzz) && fuzz->strategies == 0;
regress/sbin/iked/test_helper/fuzz.c
333
fuzz_len(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
335
assert(fuzz->fuzzed != NULL);
regress/sbin/iked/test_helper/fuzz.c
336
switch (fuzz->strategy) {
regress/sbin/iked/test_helper/fuzz.c
342
return fuzz->slen;
regress/sbin/iked/test_helper/fuzz.c
345
assert(fuzz->o1 <= fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
346
return fuzz->slen - fuzz->o1;
regress/sbin/iked/test_helper/fuzz.c
353
fuzz_ptr(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
355
assert(fuzz->fuzzed != NULL);
regress/sbin/iked/test_helper/fuzz.c
356
switch (fuzz->strategy) {
regress/sbin/iked/test_helper/fuzz.c
362
return fuzz->fuzzed;
regress/sbin/iked/test_helper/fuzz.c
364
assert(fuzz->o1 <= fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
365
return fuzz->fuzzed + fuzz->o1;
regress/sbin/iked/test_helper/fuzz.c
367
assert(fuzz->o1 <= fuzz->slen);
regress/sbin/iked/test_helper/fuzz.c
368
return fuzz->fuzzed;
regress/sbin/iked/test_helper/fuzz.c
95
fuzz_dump(struct fuzz *fuzz)
regress/sbin/iked/test_helper/fuzz.c
97
u_char *p = fuzz_ptr(fuzz);
regress/sbin/iked/test_helper/fuzz.c
98
size_t i, j, len = fuzz_len(fuzz);
regress/sbin/iked/test_helper/test_helper.h
245
struct fuzz;
regress/sbin/iked/test_helper/test_helper.h
256
struct fuzz *fuzz_begin(u_int strategies, void *p, size_t l);
regress/sbin/iked/test_helper/test_helper.h
259
void fuzz_cleanup(struct fuzz *fuzz);
regress/sbin/iked/test_helper/test_helper.h
262
void fuzz_next(struct fuzz *fuzz);
regress/sbin/iked/test_helper/test_helper.h
265
int fuzz_done(struct fuzz *fuzz);
regress/sbin/iked/test_helper/test_helper.h
268
size_t fuzz_len(struct fuzz *fuzz);
regress/sbin/iked/test_helper/test_helper.h
269
u_char *fuzz_ptr(struct fuzz *fuzz);
regress/sbin/iked/test_helper/test_helper.h
272
void fuzz_dump(struct fuzz *fuzz);
regress/usr.bin/mandoc/db/dbm_dump/dbm_dump.c
246
pchk(const char *want, const char **got, const char *name, int fuzz)
regress/usr.bin/mandoc/db/dbm_dump/dbm_dump.c
255
else if (*got > want || *got + fuzz < want)
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
108
fuzz = fuzz_begin(fuzzers, blob, sizeof(blob));
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
109
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
110
for(; !fuzz_done(fuzz); fuzz_next(fuzz))
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
112
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
60
onerror(void *fuzz)
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
63
fuzz_dump((struct fuzz *)fuzz);
regress/usr.bin/ssh/unittests/sshbuf/test_sshbuf_getput_fuzz.c
99
struct fuzz *fuzz;
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
106
struct fuzz *fuzz;
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
112
fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
118
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
119
for(i = 0; !fuzz_done(fuzz); i++, fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
120
r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
129
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
134
fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
140
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
141
for(i = 0; !fuzz_done(fuzz); i++, fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
142
r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
151
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
157
fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
163
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
164
for(i = 0; !fuzz_done(fuzz); i++, fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
165
r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
174
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
179
fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
185
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
186
for(i = 0; !fuzz_done(fuzz); i++, fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
187
r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
196
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
201
fuzz = fuzz_begin(FUZZ_BASE64, sshbuf_mutable_ptr(buf),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
207
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
208
for(i = 0; !fuzz_done(fuzz); i++, fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
209
r = sshbuf_put(fuzzed, fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
218
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
34
onerror(void *fuzz)
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
37
fuzz_dump((struct fuzz *)fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
45
struct fuzz *fuzz;
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
55
fuzz = fuzz_begin(fuzzers, sshbuf_mutable_ptr(buf), sshbuf_len(buf));
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
60
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
61
for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
62
if (sshkey_from_blob(fuzz_ptr(fuzz), fuzz_len(fuzz), &k1) == 0)
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
65
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
71
struct fuzz *fuzz;
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
85
fuzz = fuzz_begin(fuzzers, sig, l);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
88
TEST_ONERROR(onerror, fuzz);
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
89
for(; !fuzz_done(fuzz); fuzz_next(fuzz)) {
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
91
if (fuzz_matches_original(fuzz))
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
93
ASSERT_INT_NE(sshkey_verify(k, fuzz_ptr(fuzz), fuzz_len(fuzz),
regress/usr.bin/ssh/unittests/sshkey/test_fuzz.c
96
fuzz_cleanup(fuzz);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
101
if (fuzz == NULL)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
104
switch (fuzz->strategy) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
107
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
108
fuzz->o1, fuzz->slen * 8, fuzz->o1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
112
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
113
(((fuzz_ullong)fuzz->o2) * fuzz->slen * 8) + fuzz->o1,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
114
((fuzz_ullong)fuzz->slen * 8) * fuzz->slen * 8,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
115
fuzz->o1, fuzz->o2);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
119
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
120
fuzz->o1, fuzz->slen, fuzz->o1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
124
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
125
(((fuzz_ullong)fuzz->o2) * fuzz->slen) + fuzz->o1,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
126
((fuzz_ullong)fuzz->slen) * fuzz->slen,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
127
fuzz->o1, fuzz->o2);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
131
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
132
fuzz->o1, fuzz->slen, fuzz->o1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
136
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
137
fuzz->o1, fuzz->slen, fuzz->o1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
140
assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
142
fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
143
(fuzz->o1 * (fuzz_ullong)64) + fuzz->o2,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
144
fuzz->slen * (fuzz_ullong)64, fuzz->o1,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
145
fuzz_b64chars[fuzz->o2]);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
179
fuzz_dump(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
183
if (fuzz_fmt(fuzz, buf, sizeof(buf)) != 0) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
188
fprintf(stderr, "fuzz original %p len = %zu\n", fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
189
dump(fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
190
fprintf(stderr, "fuzz context %p len = %zu\n", fuzz, fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
191
dump(fuzz_ptr(fuzz), fuzz_len(fuzz));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
195
static struct fuzz *last_fuzz;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
211
struct fuzz *
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
214
struct fuzz *ret = calloc(sizeof(*ret), 1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
240
fuzz_cleanup(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
242
FUZZ_DBG(("cleanup, fuzz = %p", fuzz));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
247
assert(fuzz != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
248
assert(fuzz->seed != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
249
assert(fuzz->fuzzed != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
250
free(fuzz->seed);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
251
free(fuzz->fuzzed);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
252
free(fuzz);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
256
fuzz_strategy_done(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
259
fuzz, fuzz_ntop(fuzz->strategy), fuzz->o1, fuzz->o2, fuzz->slen));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
261
switch (fuzz->strategy) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
263
return fuzz->o1 >= fuzz->slen * 8;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
265
return fuzz->o2 >= fuzz->slen * 8;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
267
return fuzz->o2 >= fuzz->slen;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
272
return fuzz->o1 >= fuzz->slen;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
279
fuzz_next(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
284
"o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
285
(u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
287
if (fuzz->strategy == 0 || fuzz_strategy_done(fuzz)) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
289
if (fuzz->fuzzed == NULL) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
291
fuzz->fuzzed = calloc(fuzz->slen, 1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
296
if ((fuzz->strategies & i) != 0) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
297
fuzz->strategy = i;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
301
FUZZ_DBG(("selected = %u", fuzz->strategy));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
302
if (fuzz->strategy == 0) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
306
fuzz->strategies &= ~(fuzz->strategy);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
307
fuzz->o1 = fuzz->o2 = 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
310
assert(fuzz->fuzzed != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
312
switch (fuzz->strategy) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
314
assert(fuzz->o1 / 8 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
315
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
316
fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
317
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
320
assert(fuzz->o1 / 8 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
321
assert(fuzz->o2 / 8 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
322
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
323
fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
324
fuzz->fuzzed[fuzz->o2 / 8] ^= 1 << (fuzz->o2 % 8);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
325
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
326
if (fuzz->o1 >= fuzz->slen * 8) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
327
fuzz->o1 = 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
328
fuzz->o2++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
332
assert(fuzz->o1 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
333
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
334
fuzz->fuzzed[fuzz->o1] ^= 0xff;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
335
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
338
assert(fuzz->o1 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
339
assert(fuzz->o2 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
340
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
341
fuzz->fuzzed[fuzz->o1] ^= 0xff;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
342
fuzz->fuzzed[fuzz->o2] ^= 0xff;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
343
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
344
if (fuzz->o1 >= fuzz->slen) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
345
fuzz->o1 = 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
346
fuzz->o2++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
351
assert(fuzz->o1 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
352
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
353
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
356
assert(fuzz->o1 < fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
357
assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
358
memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
359
fuzz->fuzzed[fuzz->o1] = fuzz_b64chars[fuzz->o2];
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
360
fuzz->o2++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
361
if (fuzz->o2 >= sizeof(fuzz_b64chars) - 1) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
362
fuzz->o2 = 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
363
fuzz->o1++;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
371
"o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy),
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
372
(u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
376
fuzz_matches_original(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
378
if (fuzz_len(fuzz) != fuzz->slen)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
380
return memcmp(fuzz_ptr(fuzz), fuzz->seed, fuzz->slen) == 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
384
fuzz_done(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
386
FUZZ_DBG(("fuzz = %p, strategies = 0x%lx", fuzz,
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
387
(u_long)fuzz->strategies));
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
389
return fuzz_strategy_done(fuzz) && fuzz->strategies == 0;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
393
fuzz_len(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
395
assert(fuzz->fuzzed != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
396
switch (fuzz->strategy) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
402
return fuzz->slen;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
405
assert(fuzz->o1 <= fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
406
return fuzz->slen - fuzz->o1;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
413
fuzz_ptr(struct fuzz *fuzz)
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
415
assert(fuzz->fuzzed != NULL);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
416
switch (fuzz->strategy) {
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
422
return fuzz->fuzzed;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
424
assert(fuzz->o1 <= fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
425
return fuzz->fuzzed + fuzz->o1;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
427
assert(fuzz->o1 <= fuzz->slen);
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
428
return fuzz->fuzzed;
regress/usr.bin/ssh/unittests/test_helper/fuzz.c
99
fuzz_fmt(struct fuzz *fuzz, char *s, size_t n)
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
320
struct fuzz;
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
331
struct fuzz *fuzz_begin(u_int strategies, const void *p, size_t l);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
334
void fuzz_cleanup(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
337
void fuzz_next(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
344
int fuzz_matches_original(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
347
int fuzz_done(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
350
size_t fuzz_len(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
351
u_char *fuzz_ptr(struct fuzz *fuzz);
regress/usr.bin/ssh/unittests/test_helper/test_helper.h
354
void fuzz_dump(struct fuzz *fuzz);
usr.bin/patch/patch.c
1077
patch_match(LINENUM base, LINENUM offset, LINENUM fuzz)
usr.bin/patch/patch.c
1079
LINENUM pline = 1 + fuzz;
usr.bin/patch/patch.c
1081
LINENUM pat_lines = pch_ptrn_lines() - fuzz;
usr.bin/patch/patch.c
1086
for (iline = base + offset + fuzz; pline <= pat_lines; pline++, iline++) {
usr.bin/patch/patch.c
151
LINENUM where = 0, newwhere, fuzz, mymaxfuzz;
usr.bin/patch/patch.c
314
fuzz = 0;
usr.bin/patch/patch.c
320
where = locate_hunk(fuzz);
usr.bin/patch/patch.c
325
if (fuzz == 0)
usr.bin/patch/patch.c
331
where = locate_hunk(fuzz);
usr.bin/patch/patch.c
371
++fuzz <= mymaxfuzz);
usr.bin/patch/patch.c
396
if (fuzz != 0)
usr.bin/patch/patch.c
397
say(" with fuzz %ld", fuzz);
usr.bin/patch/patch.c
709
locate_hunk(LINENUM fuzz)
usr.bin/patch/patch.c
718
if (verbose && fuzz == 0 && (diff_type == CONTEXT_DIFF
usr.bin/patch/patch.c
729
if (first_guess <= input_lines && patch_match(first_guess, 0, fuzz))
usr.bin/patch/patch.c
735
if (check_after && patch_match(first_guess, offset, fuzz)) {
usr.bin/patch/patch.c
743
} else if (check_before && patch_match(first_guess, -offset, fuzz)) {