Closed Bug 1589374 Opened 2 years ago Closed 2 years ago

Make the FTP fuzzing also download a file

Categories

(Core :: Networking: FTP, enhancement)

x86_64
Linux
enhancement
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla72
Tracking Status
firefox-esr68 --- wontfix
firefox67 --- wontfix
firefox68 --- wontfix
firefox69 --- wontfix
firefox70 --- wontfix
firefox71 --- wontfix
firefox72 --- fixed

People

(Reporter: decoder, Assigned: decoder)

References

Details

(Keywords: sec-want, Whiteboard: [post-critsmash-triage][adv-main72-])

Attachments

(1 file)

The FTP target we added in bug 1562283 is working fine and is already covering about 70% of the FTP code. There is another easy opportunity to increase the coverage here by adding a target variation that downloads a file (the original target requests a directory listing).

We can simply do this by making the URL (spec) a static global in the fuzzing target and setting it to different URLs for the two targets. Easy patch coming up.

Group: core-security → network-core-security
Group: network-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla72
Depends on: 1590447
Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main72-]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.