cpp-httplib/test/fuzzing/corpus_mount/mount-traversal at 546e821c65a8bd8426c351d7e3171a99231b6456 - cpp-httplib - Gitea: Git with a cup of tea

wt/cpp-httplib

0 Fork 0

mirror of https://github.com/yhirose/cpp-httplib.git synced 2026-11-13 17:00:40 +00:00

Files

T

yhirose 546e821c65 Add server_mount_fuzzer for static file serving (#2666 )

Fuzz Server::handle_file_request through a mount point backed by a temporary directory that holds symlinks escaping the mount root, one of them into a sibling directory sharing its name prefix. Abort if a token stored outside the root appears in a response. The seeds are based on those of #2661.

Move FuzzedStream into fuzzed_stream.h so that both server fuzzers share it, and add FuzzableServer::MarkAsRunning(), without which a server that is not listening writes no file.

2026-11-12 21:52:33 -05:00

4 lines

53 B

Plaintext

Raw Blame History

	`GET /mnt/../../../../etc/passwd HTTP/1.1`
	`Host: x`