mirror of
https://github.com/espressif/esp-protocols.git
synced 2025-12-04 16:19:20 +01:00
bed116d98b
The MDNS component has been refactored from a single monolithic file mdns.c into a set of focused modules with clear responsibilities. This restructuring maintains the same functionality while improving code organization, maintainability, and testability. In the stage#2 we will focus on module based tests In the stage#3 we will focus on small scale refators and optimizations
111 lines
3.7 KiB
C
111 lines
3.7 KiB
C
/*
|
|
* SPDX-FileCopyrightText: 2025 Espressif Systems (Shanghai) CO LTD
|
|
*
|
|
* SPDX-License-Identifier: Unlicense OR CC0-1.0
|
|
*/
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <stdint.h>
|
|
#include <unistd.h>
|
|
#include "esp_err.h"
|
|
#include "mdns_receive.h"
|
|
#include "mdns_responder.h"
|
|
#include "mdns_mem_caps.h"
|
|
|
|
esp_err_t mdns_packet_push(esp_ip_addr_t *addr, int port, mdns_if_t tcpip_if, uint8_t*data, size_t len);
|
|
|
|
mdns_search_once_t *s_a, *s_aaaa, *s_ptr, *s_srv, *s_txt;
|
|
|
|
void init_responder(void)
|
|
{
|
|
mdns_ip_addr_t addr = { .addr = { .u_addr = ESP_IPADDR_TYPE_V4 } };
|
|
addr.addr.u_addr.ip4.addr = 0x11111111;
|
|
mdns_txt_item_t txt[4] = {
|
|
{"board", "esp32"},
|
|
{"tcp_check", "no"},
|
|
{"ssh_upload", "no"},
|
|
{"auth_upload", "no"}
|
|
};
|
|
mdns_priv_responder_init();
|
|
mdns_hostname_set("test");
|
|
mdns_instance_name_set("test2");
|
|
mdns_delegate_hostname_add("test3", NULL);
|
|
mdns_delegate_hostname_add("test4", &addr);
|
|
mdns_service_add("inst1", "_http", "_tcp", 80, txt, 4);
|
|
mdns_service_subtype_add_for_host("inst1", "_http", "_tcp", "test", "subtype");
|
|
mdns_service_add("inst2", "_http", "_tcp", 80, txt, 1);
|
|
mdns_service_subtype_add_for_host("inst2", "_http", "_tcp", "test", "subtype3");
|
|
mdns_service_add("inst3", "_http", "_tcp", 80, NULL, 0);
|
|
mdns_service_add_for_host("deleg1", "_http", "_tcp", "test3", 80, txt, 2);
|
|
mdns_service_add_for_host(NULL, "_http", "_tcp", "test4", 80, txt, 2);
|
|
mdns_service_add(NULL, "_scanner", "_tcp", 80, NULL, 0);
|
|
mdns_service_add("inst5", "_scanner", "_tcp", 80, NULL, 0);
|
|
mdns_service_add("inst6", "_http", "_tcp", 80, NULL, 0);
|
|
mdns_service_add("inst7", "_sleep", "_udp", 80, NULL, 0);
|
|
|
|
s_a = mdns_query_async_new("host_name", NULL, NULL, MDNS_TYPE_A, 1000, 1, NULL);
|
|
s_aaaa = mdns_query_async_new("host_name2", NULL, NULL, MDNS_TYPE_AAAA, 1000, 1, NULL);
|
|
s_ptr = mdns_query_async_new("minifritz", "_http", "_tcp", MDNS_TYPE_PTR, 1000, 1, NULL);
|
|
s_srv = mdns_query_async_new("fritz", "_http", "_tcp", MDNS_TYPE_SRV, 1000, 1, NULL);
|
|
s_txt = mdns_query_async_new("fritz", "_http", "_tcp", MDNS_TYPE_TXT, 1000, 1, NULL);
|
|
}
|
|
|
|
void deinit_responder(void)
|
|
{
|
|
mdns_query_async_delete(s_a);
|
|
mdns_query_async_delete(s_aaaa);
|
|
mdns_query_async_delete(s_ptr);
|
|
mdns_query_async_delete(s_srv);
|
|
mdns_query_async_delete(s_txt);
|
|
mdns_service_remove_all();
|
|
mdns_priv_responder_free();
|
|
}
|
|
|
|
static void send_packet(bool ip4, bool mdns_port, uint8_t*data, size_t len)
|
|
{
|
|
esp_ip_addr_t addr4 = ESP_IP4ADDR_INIT(192, 168, 1, 1);
|
|
esp_ip_addr_t addr6 = ESP_IP6ADDR_INIT(0x000002ff, 0, 0, 0xfe800000);
|
|
esp_ip_addr_t *addr = ip4 ? &addr4 : &addr6;
|
|
int port = mdns_port ? 53 : 5353;
|
|
|
|
if (mdns_packet_push(addr, port, 0, data, len) != ESP_OK) {
|
|
printf("Failed to push packet\n");
|
|
}
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
init_responder();
|
|
|
|
// Original fuzzing code
|
|
uint8_t buf[1460];
|
|
FILE *file;
|
|
size_t len = 1460;
|
|
memset(buf, 0, len);
|
|
#ifndef __AFL_LOOP
|
|
//
|
|
// Note: parameter1 is a file (mangled packet) which caused the crash
|
|
if (argc != 2) {
|
|
printf("Non-instrumentation mode: please supply a file name created by AFL to reproduce crash\n");
|
|
return 1;
|
|
}
|
|
file = fopen(argv[1], "r");
|
|
assert(file >= 0);
|
|
len = fread(buf, 1, 1460, file);
|
|
fclose(file);
|
|
{
|
|
#else
|
|
while (__AFL_LOOP(1000)) {
|
|
memset(buf, 0, 1460);
|
|
size_t len = read(0, buf, 1460);
|
|
#endif
|
|
send_packet(true, true, buf, len);
|
|
send_packet(true, false, buf, len);
|
|
send_packet(false, true, buf, len);
|
|
send_packet(false, false, buf, len);
|
|
}
|
|
deinit_responder();
|
|
|
|
return 0;
|
|
}
|