aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--tests/fuzz/ssh_client_fuzzer.cpp8
-rw-r--r--tests/fuzz/ssh_server_fuzzer.cpp11
2 files changed, 18 insertions, 1 deletions
diff --git a/tests/fuzz/ssh_client_fuzzer.cpp b/tests/fuzz/ssh_client_fuzzer.cpp
index 87bfa10b..17ae4774 100644
--- a/tests/fuzz/ssh_client_fuzzer.cpp
+++ b/tests/fuzz/ssh_client_fuzzer.cpp
@@ -117,6 +117,14 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
assert(rc == 0);
rc = ssh_options_set(session, SSH_OPTIONS_USER, "alice");
assert(rc == 0);
+ rc = ssh_options_set(session, SSH_OPTIONS_CIPHERS_C_S, "none");
+ assert(rc == 0);
+ rc = ssh_options_set(session, SSH_OPTIONS_CIPHERS_S_C, "none");
+ assert(rc == 0);
+ rc = ssh_options_set(session, SSH_OPTIONS_HMAC_C_S, "none");
+ assert(rc == 0);
+ rc = ssh_options_set(session, SSH_OPTIONS_HMAC_S_C, "none");
+ assert(rc == 0);
ssh_callbacks_init(&cb);
ssh_set_callbacks(session, &cb);
diff --git a/tests/fuzz/ssh_server_fuzzer.cpp b/tests/fuzz/ssh_server_fuzzer.cpp
index 00fb2e48..e5da7217 100644
--- a/tests/fuzz/ssh_server_fuzzer.cpp
+++ b/tests/fuzz/ssh_server_fuzzer.cpp
@@ -155,9 +155,18 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
ssh_session session = ssh_new();
assert(session != NULL);
- ssh_bind_options_set(sshbind,
+ rc = ssh_bind_options_set(sshbind,
SSH_BIND_OPTIONS_RSAKEY,
"/tmp/libssh_fuzzer_private_key");
+ assert(rc == 0);
+ rc = ssh_bind_options_set(sshbind, SSH_BIND_OPTIONS_CIPHERS_C_S, "none");
+ assert(rc == 0);
+ rc = ssh_bind_options_set(sshbind, SSH_BIND_OPTIONS_CIPHERS_S_C, "none");
+ assert(rc == 0);
+ rc = ssh_bind_options_set(sshbind, SSH_BIND_OPTIONS_HMAC_C_S, "none");
+ assert(rc == 0);
+ rc = ssh_bind_options_set(sshbind, SSH_BIND_OPTIONS_HMAC_S_C, "none");
+ assert(rc == 0);
ssh_set_auth_methods(session, SSH_AUTH_METHOD_NONE);