Commit 2e0976b7 authored Mar 09, 2020 by Myles Watson

Limit fuzzed L2CAP packets to 64K

The maximum ACL packet size is 64K, so fuzzing beyond that for L2CAP
is not worthwhile.

Tested with packets smaller than the limit to verify that the
failure only occurs with packets beyond the limit.

Bug: 146869530
Test: bluetooth_gd_fuzz_test \
      clusterfuzz-testcase-minimized-bluetooth_gd_fuzz_test-5672164365697024
Change-Id: I1361fb4904d6c1a55caad63bf65c67bef0207362

parent e6f1efcf

system/gd/l2cap/l2cap_packet_fuzz_test.cc

+1 −1

Original line number	Diff line number	Diff line
		@@ -46,7 +46,7 @@ DEFINE_AND_REGISTER_ConfigurationRequestReflectionFuzzTest(l2cap_packet_fuzz_tes
		} // namespace bluetooth

		void RunL2capPacketFuzzTest(const uint8_t* data, size_t size) {
		if (data == nullptr) return;
		if (data == nullptr \|\| size > 65536 /* Max ACL packet size */) return;
		for (auto test_function : bluetooth::l2cap::l2cap_packet_fuzz_tests) {
		test_function(data, size);
		}