From c7f8dec5c76b172ce220452b451a28b2b75d1c22 Mon Sep 17 00:00:00 2001
From: Kevin Burke <kevin@burke.dev>
Date: Tue, 2 Nov 2021 14:45:45 -0700
Subject: [PATCH] fuzz_test: add fuzz tests

Also add a sample corpus.
---
 fuzz_test.go                                   | 18 ++++++++++++++++++
 ...faf2793731f05fd4d59c3af8761ea365c7485c752fd |  2 ++
 ...6f74f5b12efb5cd85faaba9fea8fbe419d6af63add8 |  2 ++
 3 files changed, 22 insertions(+)
 create mode 100644 fuzz_test.go
 create mode 100644 testdata/fuzz/FuzzDecode/3cfc035ae4867ca13fa7bfaf2793731f05fd4d59c3af8761ea365c7485c752fd
 create mode 100644 testdata/fuzz/FuzzDecode/4f8b378d89916e9b4fd796f74f5b12efb5cd85faaba9fea8fbe419d6af63add8

diff --git a/fuzz_test.go b/fuzz_test.go
new file mode 100644
index 0000000..e3a168f
--- /dev/null
+++ b/fuzz_test.go
@@ -0,0 +1,18 @@
+//go:build 1.18
+// +build 1.18
+
+package ssh_config
+
+import (
+	"bytes"
+	"testing"
+)
+
+func FuzzDecode(f *testing.F) {
+	f.Fuzz(func(t *testing.T, in []byte) {
+		_, err := Decode(bytes.NewReader(in))
+		if err != nil {
+			t.Fatalf("decode %q: %v", string(in), err)
+		}
+	})
+}
diff --git a/testdata/fuzz/FuzzDecode/3cfc035ae4867ca13fa7bfaf2793731f05fd4d59c3af8761ea365c7485c752fd b/testdata/fuzz/FuzzDecode/3cfc035ae4867ca13fa7bfaf2793731f05fd4d59c3af8761ea365c7485c752fd
new file mode 100644
index 0000000..3497812
--- /dev/null
+++ b/testdata/fuzz/FuzzDecode/3cfc035ae4867ca13fa7bfaf2793731f05fd4d59c3af8761ea365c7485c752fd
@@ -0,0 +1,2 @@
+go test fuzz v1
+[]byte("#\t$OpenBSD: ssh_config,v 1.30 2016/02/20 23:06:23 sobrado Exp $\n\n# This is the ssh client system-wide configuration file.  See\n# ssh_config(5) for more information.  This file provides defaults for\n# users, and the values can be changed in per-user configuration files\n# or on the command line.\n\n# Configuration data is parsed as follows:\n#  1. command line options\n#  2. user-specific file\n#  3. system-wide file\n# Any configuration value is only changed the first time it is set.\n# Thus, host-specific definitions should be at the beginning of the\n# configuration file, and defaults at the end.\n\n# Site-wide defaults for some commonly used options.  For a comprehensive\n# list of available options, their meanings and defaults, please see the\n# ssh_config(5) man page.\n\n# Host *\n#   ForwardAgent no\n#   ForwardX11 no\n#   RhostsRSAAuthentication no\n#   RSAAuthentication yes\n#   PasswordAuthentication yes\n#   HostbasedAuthentication no\n#   GSSAPIAuthentication no\n#   GSSAPIDelegateCredentials no\n#   BatchMode no\n#   CheckHostIP yes\n#   AddressFamily any\n#   ConnectTimeout 0\n#   StrictHostKeyChecking ask\n#   IdentityFile ~/.ssh/identity\n#   IdentityFile ~/.ssh/id_rsa\n#   IdentityFile ~/.ssh/id_dsa\n#   IdentityFile ~/.ssh/id_ecdsa\n#   IdentityFile ~/.ssh/id_ed25519\n#   Port 22\n#   Protocol 2\n#   Cipher 3des\n#   Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc\n#   MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160\n#   EscapeChar ~\n#   Tunnel no\n#   TunnelDevice any:any\n#   PermitLocalCommand no\n#   VisualHostKey no\n#   ProxyCommand ssh -q -W %h:%p gateway.example.com\n#   RekeyLimit 1G 1h\n")
\ No newline at end of file
diff --git a/testdata/fuzz/FuzzDecode/4f8b378d89916e9b4fd796f74f5b12efb5cd85faaba9fea8fbe419d6af63add8 b/testdata/fuzz/FuzzDecode/4f8b378d89916e9b4fd796f74f5b12efb5cd85faaba9fea8fbe419d6af63add8
new file mode 100644
index 0000000..5f3337e
--- /dev/null
+++ b/testdata/fuzz/FuzzDecode/4f8b378d89916e9b4fd796f74f5b12efb5cd85faaba9fea8fbe419d6af63add8
@@ -0,0 +1,2 @@
+go test fuzz v1
+[]byte("Host localhost 127.0.0.1 # A comment at the end of a host line.\n  NoHostAuthenticationForLocalhost yes\n\n# A comment\n    # A comment with leading spaces.\n\nHost wap\n  User root\n  KexAlgorithms diffie-hellman-group1-sha1\n\nHost [some stuff behind a NAT]\n  Compression yes\n  ProxyCommand ssh -qW %h:%p [NATrouter]\n\nHost wopr # there are 2 proxies available for this one...\n  User root\n  ProxyCommand sh -c \"ssh proxy1 -qW %h:22 || ssh proxy2 -qW %h:22\"\n\nHost dhcp-??\n  UserKnownHostsFile /dev/null\n  StrictHostKeyChecking no\n  User root\n\nHost [my boxes] [*.mydomain]\n  ForwardAgent yes\n  ForwardX11 yes\n  ForwardX11Trusted yes\n\nHost *\n  #ControlMaster auto\n  #ControlPath /tmp/ssh-master-%C\n  #ControlPath /tmp/ssh-%u-%r@%h:%p\n  #ControlPersist yes\n  ForwardX11Timeout 52w\n  XAuthLocation /usr/bin/xauth\n  SendEnv LANG LC_*\n  HostKeyAlgorithms ssh-ed25519,ssh-rsa\n  AddressFamily inet\n  #UpdateHostKeys ask\n")
\ No newline at end of file