1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
#!/usr/bin/python
import argparse
import subprocess
import logging
import sys
import os
import time
def script_is_disabled(script_name):
if script_name.find('tls13') >= 0:
return True
if script_name.find('sslv2') >= 0:
return True
disabled = {
'test-SSLv3-padding.py',
'test-serverhello-random.py', # assumes support for SSLv2 hello
'test-x25519.py', # assumes support for X448 (!)
}
if script_name in disabled:
return True
slow = {
'test-bleichenbacher-workaround.py',
'test-client-compatibility.py',
'test-dhe-key-share-random.py',
'test-dhe-no-shared-secret-padding.py',
'test-ecdhe-padded-shared-secret.py',
'test-ecdhe-rsa-key-share-random.py',
'test-fuzzed-plaintext.py',
'test-invalid-client-hello-w-record-overflow.py',
'test-invalid-client-hello.py',
'test-large-hello.py',
}
if script_name in slow:
return True
return False
def main(args = None):
if args is None:
args = sys.argv[1:]
parser = argparse.ArgumentParser()
# TODO generate key and spawn the server on some random port in tmp dir
# TODO support running tls_server binary under valgrind
parser.add_argument('--verbose', action='store_true', default=False)
parser.add_argument('tls-fuzzer-dir')
args = vars(parser.parse_args(args))
tlsfuzzer_dir = args['tls-fuzzer-dir']
if not os.access(tlsfuzzer_dir, os.X_OK):
raise Exception("Unable to read TLS fuzzer dir")
tls_scripts_dir = os.path.join(tlsfuzzer_dir, 'scripts')
if not os.access(tlsfuzzer_dir, os.X_OK):
raise Exception("Unable to read TLS fuzzer scripts dir")
scripts = sorted(os.listdir(tls_scripts_dir))
procs = {}
for script in scripts:
if script_is_disabled(script):
logging.debug('Skipping %s' % (script))
continue
procs[script] = subprocess.Popen([sys.executable, os.path.join(tls_scripts_dir, script)],
cwd=tlsfuzzer_dir,
stdout=subprocess.PIPE, stderr=subprocess.PIPE)
results = {}
while len(results) != len(procs):
time.sleep(.5)
for (script, proc) in procs.items():
if script in results:
continue
if proc.poll() != None:
rv = proc.returncode
results[script] = rv
if rv == 0:
print("PASS %s" % (script))
else:
print("FAIL %s" % (script))
sys.stdout.flush()
if __name__ == '__main__':
sys.exit(main())
|
