fuzzer: fuzz several filepaths

Author: kaoudis

curl_fuzzer.cc

@@ -192,9 +192,24 @@ int fuzz_set_easy_options(FUZZ_DATA *fuzz)
                         fuzz_write_callback));
   FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_WRITEDATA, fuzz));
 
-  /* Set the cookie jar so cookies are tested. */
+  /* Set the writable cookie jar path so cookies are tested. */
   FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_COOKIEJAR, FUZZ_COOKIE_JAR_PATH));
 
+  /* Set the RO cookie file path so cookies are tested. */
+  FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_COOKIEFILE, FUZZ_RO_COOKIE_FILE_PATH));
+
+  /* Set altsvc header cache filepath so that it can be fuzzed. */
+  FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_ALTSVC, FUZZ_ALT_SVC_HEADER_CACHE_PATH));
+
+  /* Set the hsts header cache filepath so that it can be fuzzed. */
+  FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_HSTS, FUZZ_HSTS_HEADER_CACHE_PATH));
+
+  /* Set the Certificate Revocation List file path so it can be fuzzed */
+  FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_CRLFILE, FUZZ_CRL_FILE_PATH));
+
+  /* Set the .netrc file path so it can be fuzzed */
+  FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_NETRC_FILE, FUZZ_NETRC_FILE_PATH));
+
   /* Time out requests quickly. */
   FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_TIMEOUT_MS, 200L));
   FTRY(curl_easy_setopt(fuzz->easy, CURLOPT_SERVER_RESPONSE_TIMEOUT, 1L));

curl_fuzzer.h

@@ -95,9 +95,24 @@
 /* convenience string for HTTPPOST body name */
 #define	FUZZ_HTTPPOST_NAME		"test"
 
-/* Cookie-jar path. */
+/* Cookie-jar WRITE (CURLOPT_COOKIEJAR) path. */
 #define FUZZ_COOKIE_JAR_PATH            "/dev/null"
 
+/* Cookie-jar READ (CURLOPT_COOKIEFILE) path. */
+#define FUZZ_RO_COOKIE_FILE_PATH	"/dev/null"
+
+/* Alt-Svc header cache path */
+#define FUZZ_ALT_SVC_HEADER_CACHE_PATH	"/dev/null"
+
+/* HSTS header cache path */
+#define FUZZ_HSTS_HEADER_CACHE_PATH 	"/dev/null"
+
+/* Certificate Revocation List file path */
+#define FUZZ_CRL_FILE_PATH		"/dev/null"
+
+/* .netrc file path */
+#define FUZZ_NETRC_FILE_PATH		"/dev/null"
+
 /* Number of supported responses */
 #define TLV_MAX_NUM_RESPONSES           11