kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
3adb1e5a37
boringssl/ssl/test/runner/fuzzer_mode.json

55 lines
3.3 KiB
JSON
Raw Normal View History

Add a fuzzer mode suppressions file. We want to ensure -fuzzer passes tests, except for the tests it intentionally fails on. This ensures that we don't lose our ability to refresh the fuzzer transcripts. Change-Id: I761856c30379a3934fd46a24627ef8415b136f93 Reviewed-on: https://boringssl-review.googlesource.com/11221 Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 05:35:58 +01:00
{
"DisabledTests": {
"BadCBCPadding*": "Fuzzer mode has no CBC padding.",
Update suppressions for fuzzer mode. Change-Id: I07c4b67206440d169b314f24e1b3c1c697dda24f Reviewed-on: https://boringssl-review.googlesource.com/12204 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-11-14 13:40:35 +00:00
Test that Finished checks are enforced in 0-RTT. This is analogous to needing to test that Finished is enforced in False Start. Change-Id: I168a72ac51b0f75156aaf6ccc9724ae66ce1e734 Reviewed-on: https://boringssl-review.googlesource.com/18986 Reviewed-by: Steven Valdez <svaldez@google.com> Commit-Queue: David Benjamin <davidben@google.com>
2017-08-09 01:15:40 +01:00
"*BadFinished*": "Fuzzer mode ignores Finished checks.",
Add a fuzzer mode suppressions file. We want to ensure -fuzzer passes tests, except for the tests it intentionally fails on. This ensures that we don't lose our ability to refresh the fuzzer transcripts. Change-Id: I761856c30379a3934fd46a24627ef8415b136f93 Reviewed-on: https://boringssl-review.googlesource.com/11221 Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 05:35:58 +01:00
"TrailingMessageData-*Finished*": "Fuzzer mode ignores Finished checks.",
"DTLSIgnoreBadPackets*": "Fuzzer mode has no bad packets.",
"TLSFatalBadPackets": "Fuzzer mode has no bad packets.",
Fix fuzzer mode suppressions. All the patterns need to account for a possible "-Split" version now. Change-Id: Ie1b38ce10777d61d70a4d5a8bb2d44cdc98e4bfb Reviewed-on: https://boringssl-review.googlesource.com/25504 Reviewed-by: Adam Langley <agl@google.com>
2018-01-31 22:50:39 +00:00
"*-BadRecord*": "Fuzzer mode has no bad packets.",
Add a fuzzer mode suppressions file. We want to ensure -fuzzer passes tests, except for the tests it intentionally fails on. This ensures that we don't lose our ability to refresh the fuzzer transcripts. Change-Id: I761856c30379a3934fd46a24627ef8415b136f93 Reviewed-on: https://boringssl-review.googlesource.com/11221 Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 05:35:58 +01:00
"BadRSAClientKeyExchange*": "Fuzzer mode does not notice a bad premaster secret.",
"TrailingMessageData-TLS13-ServerHello": "Fuzzer mode will not read the peer's alert as a MAC error",
Fix fuzzer mode suppressions. Some new tests needed to be suppressed. Change-Id: I4474d752c338a18440efb213e0795ae81ad754fb Reviewed-on: https://boringssl-review.googlesource.com/11583 Reviewed-by: Steven Valdez <svaldez@google.com> Reviewed-by: David Benjamin <davidben@google.com>
2016-10-13 19:49:00 +01:00
"UnexpectedUnencryptedExtension-Client-TLS13": "Fuzzer mode will not read the peer's alert as a MAC error",
"UnknownUnencryptedExtension-Client-TLS13": "Fuzzer mode will not read the peer's alert as a MAC error",
Add a fuzzer mode suppressions file. We want to ensure -fuzzer passes tests, except for the tests it intentionally fails on. This ensures that we don't lose our ability to refresh the fuzzer transcripts. Change-Id: I761856c30379a3934fd46a24627ef8415b136f93 Reviewed-on: https://boringssl-review.googlesource.com/11221 Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 05:35:58 +01:00
"WrongMessageType-TLS13-ServerHello": "Fuzzer mode will not read the peer's alert as a MAC error",
Update suppressions for fuzzer mode. Change-Id: I07c4b67206440d169b314f24e1b3c1c697dda24f Reviewed-on: https://boringssl-review.googlesource.com/12204 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-11-14 13:40:35 +00:00
"BadECDSA-*": "Fuzzer mode always accepts a signature.",
"*-InvalidSignature-*": "Fuzzer mode always accepts a signature.",
Fix fuzzer mode test suppressions. Change-Id: If59e911549f639976752c018ffd7253f41c6beda Reviewed-on: https://boringssl-review.googlesource.com/17705 Reviewed-by: Steven Valdez <svaldez@google.com> Commit-Queue: Steven Valdez <svaldez@google.com>
2017-07-10 19:38:21 +01:00
"*Auth-Verify-RSA-PKCS1-*-TLS13*": "Fuzzer mode always accepts a signature.",
"*Auth-Verify-ECDSA-SHA1-TLS13*": "Fuzzer mode always accepts a signature.",
"*Auth-Verify-ECDSA-P224-*-TLS13*": "Fuzzer mode always accepts a signature.",
Disable Channel ID signature checking in fuzzer mode. Get us a little bit more room here. BUG=79 Change-Id: Ifadad94ead7794755a33f02d340111694b3572af Reviewed-on: https://boringssl-review.googlesource.com/11228 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 21:39:12 +01:00
"Verify-*Auth-SignatureType*": "Fuzzer mode always accepts a signature.",
Fix fuzzer mode suppressions. All the patterns need to account for a possible "-Split" version now. Change-Id: Ie1b38ce10777d61d70a4d5a8bb2d44cdc98e4bfb Reviewed-on: https://boringssl-review.googlesource.com/25504 Reviewed-by: Adam Langley <agl@google.com>
2018-01-31 22:50:39 +00:00
"ECDSACurveMismatch-Verify-TLS13*": "Fuzzer mode always accepts a signature.",
Update suppressions for fuzzer mode. Change-Id: I07c4b67206440d169b314f24e1b3c1c697dda24f Reviewed-on: https://boringssl-review.googlesource.com/12204 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-11-14 13:40:35 +00:00
"InvalidChannelIDSignature-*": "Fuzzer mode always accepts a signature.",
Update fuzzer mode suppressions. Change-Id: Ie4c566c29c20faac7a9a5e04c88503fc2e1ff4db Reviewed-on: https://boringssl-review.googlesource.com/12970 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <alangley@gmail.com>
2016-12-21 22:07:02 +00:00
"Resume-Server-CipherNotPreferred*": "Fuzzer mode does not encrypt tickets.",
Update suppressions for fuzzer mode. Change-Id: I07c4b67206440d169b314f24e1b3c1c697dda24f Reviewed-on: https://boringssl-review.googlesource.com/12204 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-11-14 13:40:35 +00:00
"Resume-Server-DeclineBadCipher*": "Fuzzer mode does not encrypt tickets.",
"Resume-Server-DeclineCrossVersion*": "Fuzzer mode does not encrypt tickets.",
"TicketCallback-SingleCall-*": "Fuzzer mode does not encrypt tickets.",
"CorruptTicket-*": "Fuzzer mode does not encrypt tickets.",
Fix fuzzer mode suppressions. All the patterns need to account for a possible "-Split" version now. Change-Id: Ie1b38ce10777d61d70a4d5a8bb2d44cdc98e4bfb Reviewed-on: https://boringssl-review.googlesource.com/25504 Reviewed-by: Adam Langley <agl@google.com>
2018-01-31 22:50:39 +00:00
"ShimTicketRewritable*": "Fuzzer mode does not encrypt tickets.",
Update suppressions for fuzzer mode. Change-Id: I07c4b67206440d169b314f24e1b3c1c697dda24f Reviewed-on: https://boringssl-review.googlesource.com/12204 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2016-11-14 13:40:35 +00:00
Update fuzzer mode suppressions. Change-Id: Ie4c566c29c20faac7a9a5e04c88503fc2e1ff4db Reviewed-on: https://boringssl-review.googlesource.com/12970 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Adam Langley <alangley@gmail.com>
2016-12-21 22:07:02 +00:00
"Resume-Server-*Binder*": "Fuzzer mode does not check binders.",
Fix fuzzer excludes. Change-Id: I013cf58528463ccca9e087c1c5d544beec3db24a Reviewed-on: https://boringssl-review.googlesource.com/14466 Reviewed-by: David Benjamin <davidben@google.com>
2017-03-30 00:15:20 +01:00
"SkipEarlyData*": "Trial decryption does not work with the NULL cipher.",
Fix fuzzer mode suppressions. Change-Id: I82f92019dccfaf927f7180a5af53c9ffae111861 Reviewed-on: https://boringssl-review.googlesource.com/23145 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-11-20 18:33:15 +00:00
"EarlyDataChannelID-OfferBoth-Server-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-NonZeroRTTSession-Server-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-SkipEndOfEarlyData-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-ALPNMismatch-Server-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-ALPNOmitted1-Client-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-ALPNOmitted2-Client-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-ALPNOmitted1-Server-*": "Trial decryption does not work with the NULL cipher.",
"EarlyData-ALPNOmitted2-Server-*": "Trial decryption does not work with the NULL cipher.",
Fix fuzzer mode test suppressions. Change-Id: If59e911549f639976752c018ffd7253f41c6beda Reviewed-on: https://boringssl-review.googlesource.com/17705 Reviewed-by: Steven Valdez <svaldez@google.com> Commit-Queue: Steven Valdez <svaldez@google.com>
2017-07-10 19:38:21 +01:00
"*-EarlyData-RejectUnfinishedWrite-Client-*": "Trial decryption does not work with the NULL cipher.",
In 0RTT mode, reverify the server certificate before sending early data. Bug: chromium:347402 Change-Id: I1442b595ed7296b9d9fe88357565f68e1ab80ffd Reviewed-on: https://boringssl-review.googlesource.com/c/32644 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2018-11-16 18:42:13 +00:00
"EarlyData-Reject*-Client-*": "Trial decryption does not work with the NULL cipher.",
Fix fuzzer mode suppressions. Change-Id: Ic79f189c0bb2abf5d87f59ee410cafb4fb116ab8 Reviewed-on: https://boringssl-review.googlesource.com/24004 Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: Steven Valdez <svaldez@google.com>
2017-12-11 20:10:27 +00:00
"CustomExtensions-Server-EarlyDataOffered": "Trial decryption does not work with the NULL cipher.",
Don't check renegotiation_info in fuzzer mode. Otherwise the fuzzer gets stuck at renegotiations. Bug: 104 Change-Id: If37f9ab165d06e37bfc5c423fba35edaabed293b Reviewed-on: https://boringssl-review.googlesource.com/17532 Reviewed-by: David Benjamin <davidben@google.com>
2017-07-01 05:31:27 +01:00
Test that record-splitting splits records. We probably should not have been able to land https://boringssl-review.googlesource.com/17944 without a test suppression. Change-Id: Ie47ca324f94d2f03b7d31218b0379656c070b21b Reviewed-on: https://boringssl-review.googlesource.com/17905 Commit-Queue: Steven Valdez <svaldez@google.com> Reviewed-by: Steven Valdez <svaldez@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-07-15 01:11:07 +01:00
"Renegotiate-Client-BadExt*": "Fuzzer mode does not check renegotiation_info.",
"CBCRecordSplitting*": "Fuzzer mode does not implement record-splitting."
Add a fuzzer mode suppressions file. We want to ensure -fuzzer passes tests, except for the tests it intentionally fails on. This ensures that we don't lose our ability to refresh the fuzzer transcripts. Change-Id: I761856c30379a3934fd46a24627ef8415b136f93 Reviewed-on: https://boringssl-review.googlesource.com/11221 Reviewed-by: Adam Langley <agl@google.com>
2016-09-22 05:35:58 +01:00
}
}
Reference in New Issue Copy Permalink