1 // Copyright 2016 gRPC authors.
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14
15 #include <grpc/grpc.h>
16 #include <grpc/grpc_security.h>
17 #include <grpc/slice.h>
18
19 #include <string>
20
21 #include "absl/log/check.h"
22 #include "absl/types/optional.h"
23 #include "src/core/config/core_configuration.h"
24 #include "src/core/lib/experiments/config.h"
25 #include "src/core/lib/iomgr/exec_ctx.h"
26 #include "src/core/util/env.h"
27 #include "test/core/end2end/fuzzers/api_fuzzer.pb.h"
28 #include "test/core/end2end/fuzzers/fuzzer_input.pb.h"
29 #include "test/core/end2end/fuzzers/fuzzing_common.h"
30 #include "test/core/end2end/fuzzers/network_input.h"
31 #include "test/core/test_util/fuzz_config_vars.h"
32 #include "test/core/test_util/test_config.h"
33
34 bool squelch = true;
35 bool leak_check = true;
36
37 namespace grpc_core {
38 namespace testing {
39
40 class ServerFuzzer final : public BasicFuzzer {
41 public:
ServerFuzzer(const fuzzer_input::Msg & msg,absl::FunctionRef<void (grpc_server *,int,const ChannelArgs &)> server_setup)42 explicit ServerFuzzer(
43 const fuzzer_input::Msg& msg,
44 absl::FunctionRef<void(grpc_server*, int, const ChannelArgs&)>
45 server_setup)
46 : BasicFuzzer(msg.event_engine_actions()) {
47 ExecCtx exec_ctx;
48 grpc_server_register_completion_queue(server_, cq(), nullptr);
49 // TODO(ctiller): add more registered methods (one for POST, one for PUT)
50 grpc_server_register_method(server_, "/reg", nullptr, {}, 0);
51 server_setup(
52 server_, 1234,
53 CoreConfiguration::Get()
54 .channel_args_preconditioning()
55 .PreconditionChannelArgs(
56 CreateChannelArgsFromFuzzingConfiguration(
57 msg.channel_args(), FuzzingEnvironment{resource_quota()})
58 .ToC()
59 .get()));
60 grpc_server_start(server_);
61 for (const auto& input : msg.network_input()) {
62 UpdateMinimumRunTime(ScheduleConnection(
63 input, engine().get(), FuzzingEnvironment{resource_quota()}, 1234));
64 }
65 }
66
~ServerFuzzer()67 ~ServerFuzzer() { CHECK_EQ(server_, nullptr); }
68
69 private:
CreateChannel(const api_fuzzer::CreateChannel &)70 Result CreateChannel(
71 const api_fuzzer::CreateChannel& /* create_channel */) override {
72 return Result::kFailed;
73 }
CreateServer(const api_fuzzer::CreateServer &)74 Result CreateServer(
75 const api_fuzzer::CreateServer& /* create_server */) override {
76 return Result::kFailed;
77 }
DestroyServer()78 void DestroyServer() override {
79 grpc_server_destroy(server_);
80 server_ = nullptr;
81 }
DestroyChannel()82 void DestroyChannel() override {}
83
server()84 grpc_server* server() override { return server_; }
channel()85 grpc_channel* channel() override { return nullptr; }
86
87 grpc_server* server_ = grpc_server_create(nullptr, nullptr);
88 };
89
90 } // namespace testing
91
RunServerFuzzer(const fuzzer_input::Msg & msg,absl::FunctionRef<void (grpc_server *,int,const ChannelArgs &)> server_setup)92 void RunServerFuzzer(
93 const fuzzer_input::Msg& msg,
94 absl::FunctionRef<void(grpc_server*, int, const ChannelArgs&)>
95 server_setup) {
96 if (squelch && !GetEnv("GRPC_TRACE_FUZZER").has_value()) {
97 grpc_disable_all_absl_logs();
98 }
99 static const int once = []() {
100 ForceEnableExperiment("event_engine_client", true);
101 ForceEnableExperiment("event_engine_listener", true);
102 return 42;
103 }();
104 CHECK_EQ(once, 42); // avoid unused variable warning
105 ApplyFuzzConfigVars(msg.config_vars());
106 TestOnlyReloadExperimentsFromConfigVariables();
107 testing::ServerFuzzer(msg, server_setup).Run(msg.api_actions());
108 }
109
110 } // namespace grpc_core
111