19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki/*
f89adb2c2a52b505501c3eaa2aec9fd4df6bd60aTinderbox User * Copyright (C) 2016 Internet Systems Consortium, Inc. ("ISC")
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * file, You can obtain one at http://mozilla.org/MPL/2.0/.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include "config.h"
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <named/fuzz.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#ifdef ENABLE_AFL
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <named/globals.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <named/server.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <sys/errno.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <isc/app.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <isc/condition.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <isc/mutex.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <isc/thread.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <isc/util.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <named/log.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <dns/log.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <stdlib.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <string.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <signal.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <arpa/inet.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <unistd.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#include <pthread.h>
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#ifndef __AFL_LOOP
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#error To use American Fuzzy Lop you have to set CC to afl-clang-fast!!!
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#endif
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki/*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * We are using pthreads directly because we might be using it with unthreaded
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * version of BIND, where all thread functions are mocks. Since AFL for now only
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * works on Linux it's not a problem.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic pthread_cond_t cond;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic pthread_mutex_t mutex;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic isc_boolean_t ready;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic void *
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickifuzz_main_client(void *arg) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *host;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *port;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki struct sockaddr_in servaddr;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int sockfd;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int loop;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki void *buf;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki UNUSED(arg);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * Parse named -A argument in the "address:port" syntax. Due to
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * the syntax used, this only supports IPv4 addresses.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki host = strdup(ns_g_fuzz_named_addr);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(host != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki port = strchr(host, ':');
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(port != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *port = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ++port;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki memset(&servaddr, 0, sizeof (servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_family = AF_INET;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(inet_pton(AF_INET, host, &servaddr.sin_addr) == 1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_port = htons(atoi(port));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(host);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Wait for named to start. */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ns_g_run_done) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(10000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sockfd = socket(AF_INET, SOCK_DGRAM, 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sockfd != -1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf = malloc(65536);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(buf != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki loop = 100000;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (loop--) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t length;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = read(0, buf, 65536);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length <= 0) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(1000000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki continue;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length > 4096) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (getenv("AFL_CMIN")) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return (NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki raise(SIGSTOP);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki continue;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_lock(&mutex) == ISC_R_SUCCESS);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ready = ISC_FALSE;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t sent;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = sendto(sockfd, buf, length, 0,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki (struct sockaddr *) &servaddr, sizeof(servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent == length);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* unclog */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki recvfrom(sockfd, buf, 65536, MSG_DONTWAIT, NULL, NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ready)
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki pthread_cond_wait(&cond, &mutex);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_unlock(&mutex) == ISC_R_SUCCESS);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(buf);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki close(sockfd);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server, ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return (NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki}
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic void *
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickifuzz_main_resolver(void *arg) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *shost, *sport, *rhost, *rport;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Query for A? aaaaaaaaaa.example. */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char respacket[] =
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki "\0\0\1 \0\1\0\0\0\0\0\0\naaaaaaaaaa\7example\0\0\1\0\1";
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki struct sockaddr_in servaddr, recaddr, recvaddr;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int sockfd;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int listenfd;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int loop;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *buf, *rbuf;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki UNUSED(arg);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * Parse named -A argument in the "laddress:sport:raddress:rport"
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * syntax. Due to the syntax used, this only supports IPv4 addresses.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki shost = strdup(ns_g_fuzz_named_addr);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(shost != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sport = strchr(shost, ':');
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sport != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *sport = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sport++;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rhost = strchr(sport, ':');
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(rhost != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *rhost = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rhost++;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rport = strchr(rhost, ':');
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(rport != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *rport = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rport++;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki memset(&servaddr, 0, sizeof (servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_family = AF_INET;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(inet_pton(AF_INET, shost, &servaddr.sin_addr) == 1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_port = htons(atoi(sport));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki memset(&recaddr, 0, sizeof (recaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki recaddr.sin_family = AF_INET;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(inet_pton(AF_INET, rhost, &recaddr.sin_addr) == 1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki recaddr.sin_port = htons(atoi(rport));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(shost);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Wait for named to start */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ns_g_run_done) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(10000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sockfd = socket(AF_INET, SOCK_DGRAM, 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sockfd != -1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki listenfd = socket(AF_INET, SOCK_DGRAM, 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(listenfd != -1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(bind(listenfd, (struct sockaddr *)&recaddr,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sizeof(struct sockaddr_in)) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf = malloc(65536);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rbuf = malloc(65536);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(buf != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(rbuf != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki loop = 100000;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (loop--) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t length;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki memset(buf, 0, 16);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = read(0, buf, 65536);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length <= 0) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(1000000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki continue;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length > 4096) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (getenv("AFL_CMIN")) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return (NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki raise(SIGSTOP);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki continue;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length < 16) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = 16;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_lock(&mutex) == ISC_R_SUCCESS);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ready = ISC_FALSE;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t sent;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Randomize query ID. */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int id = random();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki respacket[0] = id >> 8;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki respacket[1] = id & 0xff;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* flush */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki socklen_t socklen = sizeof(recvaddr);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = recvfrom(listenfd, rbuf, 65536, MSG_DONTWAIT,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki (struct sockaddr *) &recvaddr, &socklen);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = sendto(sockfd, respacket, sizeof(respacket), 0,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki (struct sockaddr *) &servaddr, sizeof(servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent == sizeof(respacket));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki socklen = sizeof(recvaddr);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = recvfrom(listenfd, rbuf, 65536, 0,
f89adb2c2a52b505501c3eaa2aec9fd4df6bd60aTinderbox User (struct sockaddr *) &recvaddr, &socklen);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent > 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Copy QID and set QR so that response is always processed. */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[0] = rbuf[0];
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[1] = rbuf[1];
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[2] |= 0x80;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = sendto(listenfd, buf, length, 0,
f89adb2c2a52b505501c3eaa2aec9fd4df6bd60aTinderbox User (struct sockaddr *) &recvaddr, sizeof(recvaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent == length);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* We might get additional questions here (e.g. for CNAME). */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki for (;;) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki fd_set fds;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki struct timeval tv;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int rv;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int max;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki FD_ZERO(&fds);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki FD_SET(listenfd, &fds);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki FD_SET(sockfd, &fds);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki tv.tv_sec = 10;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki tv.tv_usec = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki max = (listenfd > sockfd ? listenfd : sockfd)+1;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki rv = select(max, &fds, NULL, NULL, &tv);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(rv > 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (FD_ISSET(sockfd, &fds)) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* It's the reply, we're done. */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki recvfrom(sockfd, buf, 65536, 0, NULL, NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki break;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * We've got additional question (eg. cname chain)
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * We are bouncing it - setting QR flag and NOERROR
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * rcode and sending it back.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = recvfrom(listenfd, buf, 65536, 0,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki (struct sockaddr *) &recvaddr, &socklen);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[2] |= 0x80;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[3] &= 0xF0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = sendto(listenfd, buf, length, 0,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki (struct sockaddr *) &recvaddr,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sizeof(recvaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent == length);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ready)
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki pthread_cond_wait(&cond, &mutex);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_unlock(&mutex) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(buf);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki close(sockfd);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server, ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * It's here just for the signature, that's how AFL detects if it's
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * a 'persistent mode' binary.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki __AFL_LOOP(0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return (NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki}
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickistatic void *
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickifuzz_main_tcp(void *arg) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *host;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *port;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki struct sockaddr_in servaddr;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int sockfd;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki char *buf;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int loop;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki UNUSED(arg);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * Parse named -A argument in the "address:port" syntax. Due to
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * the syntax used, this only supports IPv4 addresses.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki host = strdup(ns_g_fuzz_named_addr);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(host != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki port = strchr(host, ':');
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(port != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki *port = 0;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ++port;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki memset(&servaddr, 0, sizeof (servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_family = AF_INET;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(inet_pton(AF_INET, host, &servaddr.sin_addr) == 1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki servaddr.sin_port = htons(atoi(port));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(host);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* Wait for named to start */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ns_g_run_done) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(10000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf = malloc(65539);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(buf != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki loop = 100000;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (loop--) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t length;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (ns_g_fuzz_type == ns_fuzz_tcpclient) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * To fuzz TCP client we have to put length at
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * the start of packet.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = read(0, buf+2, 65535);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[0] = length >> 8;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[1] = length & 0xff;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length += 2;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki } else {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki length = read(0, buf, 65535);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (length <= 0) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki usleep(1000000);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki continue;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (ns_g_fuzz_type == ns_fuzz_http) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /*
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki * This guarantees that the request will be processed.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[length++]='\r';
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[length++]='\n';
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[length++]='\r';
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki buf[length++]='\n';
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_lock(&mutex) == ISC_R_SUCCESS);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ready = ISC_FALSE;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ssize_t sent;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int yes = 1;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki int r;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sockfd = socket(AF_INET, SOCK_STREAM, 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sockfd != -1);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(setsockopt(sockfd, SOL_SOCKET, SO_REUSEADDR,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki &yes, sizeof(int)) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki do {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki r = connect(sockfd, (struct sockaddr*)&servaddr,
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sizeof(servaddr));
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki } while (r != 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki sent = write(sockfd, buf, length);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(sent == length);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki close(sockfd);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki /* unclog */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki recvfrom(sockfd, buf, 65537, MSG_DONTWAIT, NULL, NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki while (!ready)
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki pthread_cond_wait(&cond, &mutex);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_unlock(&mutex) == ISC_R_SUCCESS);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki free(buf);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki close(sockfd);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server, ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return (NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki}
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#endif /* ENABLE_AFL */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickivoid
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickinamed_fuzz_notify(void) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#ifdef ENABLE_AFL
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (getenv("AFL_CMIN")) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ns_server_flushonshutdown(ns_g_server, ISC_FALSE);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki isc_app_shutdown();
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki return;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki raise(SIGSTOP);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_lock(&mutex) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki ready = ISC_TRUE;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_cond_signal(&cond) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_unlock(&mutex) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#endif /* ENABLE_AFL */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki}
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickivoid
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecickinamed_fuzz_setup(void) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#ifdef ENABLE_AFL
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki if (getenv("__AFL_PERSISTENT") || getenv("AFL_CMIN")) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki pthread_t thread;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki void *(fn) = NULL;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki switch (ns_g_fuzz_type) {
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki case ns_fuzz_client:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki fn = fuzz_main_client;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki break;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki case ns_fuzz_http:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki case ns_fuzz_tcpclient:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki case ns_fuzz_rndc:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki fn = fuzz_main_tcp;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki break;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki case ns_fuzz_resolver:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki fn = fuzz_main_resolver;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki break;
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki default:
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(fn != NULL);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_mutex_init(&mutex, NULL) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_cond_init(&cond, NULL) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki RUNTIME_CHECK(pthread_create(&thread, NULL, fn, NULL) == 0);
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki }
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki#endif /* ENABLE_AFL */
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki}