openssl/fuzz, branch OpenSSL_1_1_0g

Fix out-of-memory condition in conf

2017-03-12T00:24:40Z

conf has the ability to expand variables in config files. Repeatedly doing this can lead to an exponential increase in the amount of memory required. This places a limit on the length of a value that can result from an expansion. Credit to OSS-Fuzz for finding this problem. Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/2894) (cherry picked from commit 8a585601fea1091022034dd14b961c1ecd5916c3)

conf fuzzer: also check for an empty file

2016-11-03T04:18:05Z

Reviewed-by: Tim Hudson Reviewed-by: Rich Salz GH: #1828 (cherry picked from commit ea6199ea91ac59ae53686335e436d554cdacd2dc)

[fuzzers] do not fail fuzzers with empty input

2016-11-03T04:17:51Z

Reviewed-by: Kurt Roeckx Reviewed-by: Rich Salz GH: #1788 (cherry picked from commit ba7407002d899b614d4728da9004594f947ff3da)

Fix link to LibFuzzer

2016-11-02T17:11:11Z

CLA: trivial Reviewed-by: Kurt Roeckx Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/1801) (cherry picked from commit fe2582a224e35585274198ef2d2983f3afa84f1e)

Add to fuzz corpora for CVE-2016-6309

2016-09-26T08:05:42Z

Reviewed-by: Emilia Käsper Reviewed-by: Matt Caswell (cherry picked from commit 44f206aa9dfd4f226f17d9093732dbece5300aa6)

Update fuzz corpora

2016-08-23T19:01:54Z

This is a new minimal corpus with the following changes: - asn1: files: 1135 (+474), tuples: 27236 (+7496) - asn1parse: files: 305 (-3), tuples: 8758 (+11) - bignum: files: 370 (-1), tuples: 9547 (+10) - bndiv: files: 160 (+0), tuples: 2416 (+6) - cms: files: 155 (-1), tuples: 3408 (+0) - conf: files: 231 (-11), tuples: 4668 (+3) - crl: files: 905 (+188), tuples: 22876 (+4096) - ct: files: 117 (+35), tuples: 3557 (+908) - x509: files: 920, tuples: 28334 Note that tuple count depends on the binary and is random. Reviewed-by: Emilia Käsper Reviewed-by: Richard Levitte

Some minor tweaks to the fuzzing docs

2016-08-01T21:07:04Z

Reviewed-by: Rich Salz

Include what we use.

2016-08-01T10:30:33Z

Reviewed-by: Rich Salz

Fix various no-*s.

2016-08-01T10:30:33Z

Reviewed-by: Rich Salz

Skip non-existing files.

2016-07-26T19:01:05Z

Reviewed-by: Rich Salz GH: #1324