1 // Copyright 2016 gRPC authors.
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14
15 #include <string>
16
17 #include "absl/types/optional.h"
18
19 #include <grpc/grpc.h>
20 #include <grpc/grpc_security.h>
21 #include <grpc/slice.h>
22 #include <grpc/support/log.h>
23
24 #include "src/core/lib/config/core_configuration.h"
25 #include "src/core/lib/experiments/config.h"
26 #include "src/core/lib/gprpp/env.h"
27 #include "src/core/lib/iomgr/exec_ctx.h"
28 #include "test/core/end2end/fuzzers/api_fuzzer.pb.h"
29 #include "test/core/end2end/fuzzers/fuzzer_input.pb.h"
30 #include "test/core/end2end/fuzzers/fuzzing_common.h"
31 #include "test/core/end2end/fuzzers/network_input.h"
32 #include "test/core/util/fuzz_config_vars.h"
33
34 bool squelch = true;
35 bool leak_check = true;
36
dont_log(gpr_log_func_args *)37 static void dont_log(gpr_log_func_args* /*args*/) {}
38
39 namespace grpc_core {
40 namespace testing {
41
42 class ServerFuzzer final : public BasicFuzzer {
43 public:
ServerFuzzer(const fuzzer_input::Msg & msg,absl::FunctionRef<void (grpc_server *,int,const ChannelArgs &)> server_setup)44 explicit ServerFuzzer(
45 const fuzzer_input::Msg& msg,
46 absl::FunctionRef<void(grpc_server*, int, const ChannelArgs&)>
47 server_setup)
48 : BasicFuzzer(msg.event_engine_actions()) {
49 ExecCtx exec_ctx;
50 grpc_server_register_completion_queue(server_, cq(), nullptr);
51 // TODO(ctiller): add more registered methods (one for POST, one for PUT)
52 grpc_server_register_method(server_, "/reg", nullptr, {}, 0);
53 server_setup(
54 server_, 1234,
55 CoreConfiguration::Get()
56 .channel_args_preconditioning()
57 .PreconditionChannelArgs(
58 CreateChannelArgsFromFuzzingConfiguration(
59 msg.channel_args(), FuzzingEnvironment{resource_quota()})
60 .ToC()
61 .get()));
62 grpc_server_start(server_);
63 for (const auto& input : msg.network_input()) {
64 UpdateMinimumRunTime(ScheduleConnection(
65 input, engine(), FuzzingEnvironment{resource_quota()}, 1234));
66 }
67 }
68
~ServerFuzzer()69 ~ServerFuzzer() { GPR_ASSERT(server_ == nullptr); }
70
71 private:
CreateChannel(const api_fuzzer::CreateChannel &)72 Result CreateChannel(
73 const api_fuzzer::CreateChannel& /* create_channel */) override {
74 return Result::kFailed;
75 }
CreateServer(const api_fuzzer::CreateServer &)76 Result CreateServer(
77 const api_fuzzer::CreateServer& /* create_server */) override {
78 return Result::kFailed;
79 }
DestroyServer()80 void DestroyServer() override {
81 grpc_server_destroy(server_);
82 server_ = nullptr;
83 }
DestroyChannel()84 void DestroyChannel() override {}
85
server()86 grpc_server* server() override { return server_; }
channel()87 grpc_channel* channel() override { return nullptr; }
88
89 grpc_server* server_ = grpc_server_create(nullptr, nullptr);
90 };
91
92 } // namespace testing
93
RunServerFuzzer(const fuzzer_input::Msg & msg,absl::FunctionRef<void (grpc_server *,int,const ChannelArgs &)> server_setup)94 void RunServerFuzzer(
95 const fuzzer_input::Msg& msg,
96 absl::FunctionRef<void(grpc_server*, int, const ChannelArgs&)>
97 server_setup) {
98 if (squelch && !GetEnv("GRPC_TRACE_FUZZER").has_value()) {
99 gpr_set_log_function(dont_log);
100 }
101 static const int once = []() {
102 ForceEnableExperiment("event_engine_client", true);
103 ForceEnableExperiment("event_engine_listener", true);
104 return 42;
105 }();
106 GPR_ASSERT(once == 42); // avoid unused variable warning
107 ApplyFuzzConfigVars(msg.config_vars());
108 TestOnlyReloadExperimentsFromConfigVariables();
109 testing::ServerFuzzer(msg, server_setup).Run(msg.api_actions());
110 }
111
112 } // namespace grpc_core
113