Closed Bug 1589374 Opened 5 years ago Closed 5 years ago

Make the FTP fuzzing also download a file

Categories

(Core Graveyard :: Networking: FTP, enhancement)

x86_64
Linux
enhancement
Not set
normal

Tracking

(firefox-esr68 wontfix, firefox67 wontfix, firefox68 wontfix, firefox69 wontfix, firefox70 wontfix, firefox71 wontfix, firefox72 fixed)

RESOLVED FIXED
mozilla72
Tracking Status
firefox-esr68 --- wontfix
firefox67 --- wontfix
firefox68 --- wontfix
firefox69 --- wontfix
firefox70 --- wontfix
firefox71 --- wontfix
firefox72 --- fixed

People

(Reporter: decoder, Assigned: decoder)

References

Details

(Keywords: sec-want, Whiteboard: [post-critsmash-triage][adv-main72-])

Attachments

(1 file)

The FTP target we added in bug 1562283 is working fine and is already covering about 70% of the FTP code. There is another easy opportunity to increase the coverage here by adding a target variation that downloads a file (the original target requests a directory listing).

We can simply do this by making the URL (spec) a static global in the fuzzing target and setting it to different URLs for the two targets. Easy patch coming up.

Group: core-security → network-core-security
Group: network-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla72
Depends on: 1590447
Flags: qe-verify-
Whiteboard: [post-critsmash-triage]
Whiteboard: [post-critsmash-triage] → [post-critsmash-triage][adv-main72-]
Group: core-security-release
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: