fuzz: Fuzz connection shutdown (#314)

ngtcp2 · Jan 9, 2025 · 1c3fe9a · 1c3fe9a
1 parent 0fd649a
commit 1c3fe9a
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/fuzz/fuzz_http3serverreq.cc b/fuzz/fuzz_http3serverreq.cc
@@ -298,6 +298,13 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
     return 0;
   }
 
+  auto shutdown_started = false;
+
+  rv = nghttp3_conn_bind_control_stream(conn, 3);
+  if (rv != 0) {
+    goto fin;
+  }
+
   nghttp3_conn_set_max_client_streams_bidi(
     conn, fuzzed_data_provider.ConsumeIntegral<uint64_t>());
 
@@ -330,6 +337,20 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
       }
     }
 
+    if (!shutdown_started && fuzzed_data_provider.ConsumeBool()) {
+      if (nghttp3_conn_submit_shutdown_notice(conn) != 0) {
+        goto fin;
+      }
+    }
+
+    if (!shutdown_started && fuzzed_data_provider.ConsumeBool()) {
+      shutdown_started = true;
+
+      if (nghttp3_conn_shutdown(conn) != 0) {
+        goto fin;
+      }
+    }
+
     if (set_stream_priorities(conn, fuzzed_data_provider) != 0) {
       goto fin;
     }