tests: Add code to allow us to test packet handling in bgp easier

Fuzzing with tools like afl requires the ability to quickly/easily
call a function to test it's input.  In the case of bgp we
need the ability to test bgp's packet handler quickly.  This
added program bgpd/test_packet takes a file name as input
that it treats as normal bgp communication between itself
and a peer.

Signed-off-by: Donald Sharp <sharpd@cumulusnetworks.com>

diff --git a/tests/Makefile.am b/tests/Makefile.am
index fafdd73bf375b145586d5a09cec21f33504bc2f3..2ee05fa93549b35dacefe577e9d7f4c8f9140a87 100644 (file)
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -17,6 +17,7 @@ if BGPD
 TESTS_BGPD = \
        bgpd/test_aspath \
        bgpd/test_capability \
+       bgpd/test_packet \
        bgpd/test_ecommunity \
        bgpd/test_mp_attr \
        bgpd/test_mpath
@@ -132,6 +133,7 @@ lib_cli_test_commands_SOURCES = lib/cli/test_commands_defun.c \
                                 helpers/c/prng.c
 bgpd_test_aspath_SOURCES = bgpd/test_aspath.c
 bgpd_test_capability_SOURCES = bgpd/test_capability.c
+bgpd_test_packet_SOURCES = bgpd/test_packet.c
 bgpd_test_ecommunity_SOURCES = bgpd/test_ecommunity.c
 bgpd_test_mp_attr_SOURCES = bgpd/test_mp_attr.c
 bgpd_test_mpath_SOURCES = bgpd/test_mpath.c
@@ -167,6 +169,7 @@ lib_cli_test_cli_LDADD = $(ALL_TESTS_LDADD)
 lib_cli_test_commands_LDADD = $(ALL_TESTS_LDADD)
 bgpd_test_aspath_LDADD = $(BGP_TEST_LDADD)
 bgpd_test_capability_LDADD = $(BGP_TEST_LDADD)
+bgpd_test_packet_LDADD = $(BGP_TEST_LDADD)
 bgpd_test_ecommunity_LDADD = $(BGP_TEST_LDADD)
 bgpd_test_mp_attr_LDADD = $(BGP_TEST_LDADD)
 bgpd_test_mpath_LDADD = $(BGP_TEST_LDADD)

diff --git a/tests/bgpd/test_packet.c b/tests/bgpd/test_packet.c
new file mode 100644 (file)
index 0000000..298dd1e
--- /dev/null
+++ b/tests/bgpd/test_packet.c
@@ -0,0 +1,85 @@
+/*
+ * Copyright (C) 2017 Cumulus Networks Inc.
+ *                    Donald Sharp
+ *
+ * This file is part of FRR
+ *
+ * FRR is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the
+ * Free Software Foundation; either version 2, or (at your option) any
+ * later version.
+ *
+ * FRR is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along
+ * with this program; see the file COPYING; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
+ */
+
+#include <zebra.h>
+
+#include "qobj.h"
+#include "vty.h"
+#include "stream.h"
+#include "privs.h"
+#include "memory.h"
+#include "queue.h"
+#include "filter.h"
+
+#include "bgpd/bgpd.h"
+#include "bgpd/bgp_open.h"
+#include "bgpd/bgp_debug.h"
+#include "bgpd/bgp_packet.h"
+#include "bgpd/bgp_aspath.h"
+
+/* need these to link in libbgp */
+struct zebra_privs_t *bgpd_privs = NULL;
+struct thread_master *master = NULL;
+
+static struct bgp *bgp;
+static as_t asn = 100;
+
+extern int bgp_read_packet(struct peer *peer);
+
+/*
+ * This file is intended to be used as input for some sort of
+ * fuzzer.  Specifically I had afl in mind when I wrote
+ * this code.
+ */
+int main(int argc, char *argv[])
+{
+       struct peer *peer;
+       int i, j;
+       struct thread t;
+
+       qobj_init();
+       bgp_attr_init();
+       master = thread_master_create(NULL);
+       bgp_master_init(master);
+       vrf_init(NULL, NULL, NULL, NULL);
+       bgp_option_set(BGP_OPT_NO_LISTEN);
+
+       if (bgp_get(&bgp, &asn, NULL, BGP_INSTANCE_TYPE_DEFAULT))
+               return -1;
+
+       peer = peer_create_accept(bgp);
+       peer->host = (char *)"foo";
+
+       for (i = AFI_IP; i < AFI_MAX; i++)
+               for (j = SAFI_UNICAST; j < SAFI_MAX; j++) {
+                       peer->afc[i][j] = 1;
+                       peer->afc_adv[i][j] = 1;
+               }
+
+       SET_FLAG(peer->cap, PEER_CAP_DYNAMIC_ADV);
+       peer->status = Established;
+
+        peer->fd = open(argv[1], O_RDONLY|O_NONBLOCK);
+       t.arg = peer;
+       peer->t_read = &t;
+ 
+       printf("bgp_read_packet returns: %d\n", bgp_read(&t));
+}