scripts for console json Structure-Aware-Fuzzing demonstration

Author: nataraj-hates-MS-for-stealing-github

console_demo/Makefile

@@ -0,0 +1,21 @@
+
+BLOBSTAMPER_SRC := $(wildcard  ../blobstamper/*.cpp)
+BLOBSTAMPER_OBJ := $(addsuffix .o, $(basename $(BLOBSTAMPER_SRC)))
+
+EXAMPLES_SRC = $(wildcard  *.cpp)
+EXAMPLES_BIN = $(basename $(EXAMPLES_SRC))
+
+
+all: $(EXAMPLES_BIN)
+
+build-libtappp:
+	$(MAKE) -C ../libtappp
+
+%: %.cpp $(BLOBSTAMPER_OBJ) $(BLOBSTAMPER_PG_OBJ) $(WRAPPERS_OBJ)
+	$(CXX) $(CXXFLAGS) -I.. -o $@ $< $(BLOBSTAMPER_OBJ) 
+
+clean:
+	-rm $(EXAMPLES_BIN) 2>/dev/null
+
+.PHONY: test clean all
+

console_demo/_run.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+PLAY_TIME="1m 2s"
+SAMPLE_SIZE=256
+
+dd if=/dev/random of=buf count=1 bs=$SAMPLE_SIZE
+
+
+tmux split-window -v "watch -d -n0.1 -c './pulp2json buf| jq -C'";
+tmux split-window -h "watch -d -n0.1 -c 'hexdump buf'"
+
+tmux new-window -P -d -n pseudo-fuzz "watch -d -n0.1 './pseudo_fuzz.pl'"
+tmux new-window -P -d -n watchdog "sleep $PLAY_TIME; tmux kill-session"
+
+

console_demo/pseudo_fuzz.pl

@@ -0,0 +1,19 @@
+#!/usr/bin/perl
+
+use strict;
+use Path::Tiny;
+use bytes;
+
+die "file 'buf' not found" unless -e "buf";
+
+my $size = -s "buf";
+
+my $offset = int(rand($size));
+my $value = int(rand(256));
+
+open(my $out, '+<:raw', 'buf');
+seek($out, $offset, 0);
+print $out pack('C', $value);
+
+close $out;
+

console_demo/pulp2json.cpp

@@ -0,0 +1,64 @@
+/******************************************************************************
+ *
+ * Copyright 2021 Nikolay Shaplov (Postgres Professional)
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ ******************************************************************************/
+
+#include <string>
+#include <vector>
+#include <iostream>
+
+#include "blobstamper/stamp_json.h"
+#include <sys/stat.h>
+
+#include <fstream>
+
+
+long GetFileSize(std::string filename)
+{
+    struct stat stat_buf;
+    int rc = stat(filename.c_str(), &stat_buf);
+    return rc == 0 ? stat_buf.st_size : -1;
+}
+
+int
+main(int argc, char *argv[])
+{
+    if (argc<2)
+    {
+        fprintf(stderr, "Please specify input file name as first argument\n");
+        exit(1);
+    }
+    std::string file_name = argv[1];
+
+    std::fstream f{file_name};
+    if (!f)
+    {
+        std::cerr << "Unable to open file '"<<file_name<<"'\n";
+        exit (1);
+    }
+    long file_size = GetFileSize(file_name);
+
+    std::vector<char> buffer (file_size,0);
+    f.read(&buffer[0], buffer.size());
+
+    auto blob = std::make_shared<Blob>(&buffer[0], buffer.size());
+
+    auto stamp_j = std::make_shared<StampJSON>();
+    std::string s = stamp_j->ExtractStr(blob);
+
+    printf("%s\n", s.c_str());
+
+}

console_demo/run.sh

@@ -0,0 +1 @@
+tmux new-session "bash _run.sh"