zeek/testing/btest/core/ip-broken-header.zeek
Tim Wojtulewicz 0e34f2e02f Fix handling of IP packets with bogus IP header lengths
Credit to OSS-Fuzz for discovery
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34711
(Link to details becomes public 30 days after patch release)
2021-05-27 16:33:50 -07:00

11 lines
550 B
Text

# This test has a trace that was generated from fuzzing which used to cause
# OOB reads in Zeek. It has a number of packets broken in weird ways.
#
# @TEST-EXEC: gunzip -c $TRACES/trunc/mpls-6in6-broken.pcap.gz | zeek -C -b -r - %INPUT
# @TEST-EXEC: mv weird.log mpls-6in6-broken-wierd.log
# @TEST-EXEC: btest-diff mpls-6in6-broken-wierd.log
# @TEST-EXEC: zeek -C -b -r $TRACES/ip-bogus-header-len.pcap %INPUT
# @TEST-EXEC: mv weird.log ip-bogus-header-weird.log
# @TEST-EXEC: btest-diff ip-bogus-header-weird.log
@load base/frameworks/notice/weird