arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2025-01-18 03:10:58 +00:00
Code Issues Releases Wiki Activity

feat(crypto): fuzz mnemonic_from_data()

Browse Source
This commit is contained in:
Christian Reitter 2021-11-14 11:47:38 +01:00 committed by Andrew Kozlik
parent 5564251920
commit 052a860afc
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
crypto/fuzzer/fuzzer.c
View File

@ -628,10 +628,33 @@ int fuzz_mnemonic_to_bits(void) {
uint8_t mnemonic_bits[32 + 1] = {0}; uint8_t mnemonic_bits[32 + 1] = {0};
mnemonic_to_bits((const char *)&mnemonic, mnemonic_bits); mnemonic_to_bits((const char *)&mnemonic, mnemonic_bits);
// TODO what can be checked about the result, computing a checksum?
return 0; return 0;
} }
int fuzz_mnemonic_from_data(void) {
if (fuzzer_length < 16 || fuzzer_length > 32) {
return 0;
}
const char* mnemo_result = mnemonic_from_data(fuzzer_ptr, fuzzer_length);
if(mnemo_result != NULL) {
int res = mnemonic_check(mnemo_result);
if(res == 0) {
// TODO the mnemonic_check() function is currently incorrectly rejecting
// valid 15 and 21 word seeds - remove this workaround limitation later
if(fuzzer_length != 20 && fuzzer_length != 28) {
// the generated mnemonic has an invalid format
crash();
}
}
}
// scrub the internal buffer to rule out persistent side effects
mnemonic_clear();
return 0;
}
int fuzz_aes(void) { int fuzz_aes(void) {
if (fuzzer_length < 1 + 16 + 16 + 32) { if (fuzzer_length < 1 + 16 + 16 + 32) {
return 0; return 0;
@ -1027,6 +1050,9 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
case 24: case 24:
fuzz_ed25519_sign_verify(); fuzz_ed25519_sign_verify();
break; break;
case 25:
fuzz_mnemonic_from_data();
break;
default: default:
// do nothing // do nothing