Skip to content

Instantly share code, notes, and snippets.

@cmeister2
Created April 21, 2018 13:30
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save cmeister2/be81c194fbd4d53da720949ad18c7b71 to your computer and use it in GitHub Desktop.
Save cmeister2/be81c194fbd4d53da720949ad18c7b71 to your computer and use it in GitHub Desktop.
$ FUZZ_VERBOSE=yes ./curl_fuzzer_http ../clusterfuzz-testcase-minimized-curl_fuzzer_http-5380578661629952
* STATE: INIT => CONNECT handle 0x62a000000208; line 1407 (connection #-5000)
* Rebuilt URL to: ]/?
* Connecting to hostname: 127.0.1.127
* http2.c:247 Setting http->status_code to -1 (0x617000000788)
* Added connection 0. The cache now contains 1 members
[../clusterfuzz-testcase-minimized-curl_fuzzer_http-5380578661629952] Opened.. Read 125 bytes, fuzzing.. FUZZ: Using socket manager 0
FUZZ[0]: Using socket manager 0
* Trying 127.0.1.127...
* Could not set TCP_NODELAY: Operation not supported
* STATE: CONNECT => WAITCONNECT handle 0x62a000000208; line 1459 (connection #0)
* Connected to 127.0.1.127 (M) port 80 (#0)
* STATE: WAITCONNECT => SENDPROTOCONNECT handle 0x62a000000208; line 1576 (connection #0)
* Marked for [keep alive]: HTTP default
* STATE: SENDPROTOCONNECT => DO handle 0x62a000000208; line 1594 (connection #0)
* HTTP/2 over clean TCP
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* nghttp2_session_mem_recv() returns 0
* http2_send len=53
* h2 header: :method:GET
* h2 header: :path:/?
* h2 header: :scheme:http
* h2 header: :authority:]
* h2 header: Accept:*/*
* Using Stream ID: 1 (easy handle 0x62a000000208)
* before_frame_send() was called
* on_frame_send() was called, length = 25
> GET /? HTTP/2
Host: ]
Accept: */*
* STATE: DO => DO_DONE handle 0x62a000000208; line 1673 (connection #0)
* multi changed, check CONNECT_PEND queue!
* STATE: DO_DONE => WAITPERFORM handle 0x62a000000208; line 1800 (connection #0)
* STATE: WAITPERFORM => PERFORM handle 0x62a000000208; line 1816 (connection #0)
FUZZ: Initial perform; still running? 1
FUZZ[0]: Received 98 bytes
==>
PRI * HTTP/2.0
SM
d?▒▒▒c▒QEQEQEQO▒A]S*/*
<==
FUZZ[0]: Sending next response: 1
FUZZ[0]: Shutting down server socket: 4
* http2_recv: easy 0x62a000000208 (stream 1)
* nread=87
* on_begin_headers() was called
* on_begin_headers() was called
* on_frame_recv() header 1 stream 1
* http2.c:634 Assert stream->status_code != -1 (0x617000000788)
curl_fuzzer_http: http2.c:636: int on_frame_recv(nghttp2_session *, const nghttp2_frame *, void *): Assertion `stream->status_code != -1' failed.
Aborted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment