aboutsummaryrefslogtreecommitdiff
path: root/tests/fuzz/cold-transaction.cpp (unfollow)
AgeCommit message (Collapse)AuthorFilesLines
2020-08-17replace most boost serialization with existing monero serializationmoneromooo-monero1-4/+4
This reduces the attack surface for data that can come from malicious sources (exported output and key images, multisig transactions...) since the monero serialization is already exposed to the outside, and the boost lib we were using had a few known crashers. For interoperability, a new load-deprecated-formats wallet setting is added (off by default). This allows loading boost format data if there is no alternative. It will likely go at some point, along with the ability to load those. Notably, the peer lists file still uses the boost serialization code, as the data it stores is define in epee, while the new serialization code is in monero, and migrating it was fairly hairy. Since this file is local and not obtained from anyone else, the marginal risk is minimal, but it could be migrated later if needed. Some tests and tools also do, this will stay as is for now.
2020-07-20wallet2_api: implement runtime proxy configurationxiphon1-1/+1
2020-06-14fix leaks in fuzz testsmoneromooo-monero1-5/+8
2020-05-15fuzz_tests: refactor and add OSS-Fuzz compatibilitymoneromooo-monero1-63/+18
2020-05-06Update copyright year to 2020SomaticFanatic1-1/+1
Update copyright year to 2020
2019-03-25Added socks proxy (tor/i2pd/kovri) support to walletLee Clagett1-1/+1
2019-03-12tests: disable wallet SSL init for tests involving wallet2moneromooo-monero1-1/+1
2019-03-05Update 2019 copyrightbinaryFate1-1/+1
2018-10-02Catch more exceptions in dtorsmoneromooo-monero1-0/+2
Misc coverity reports
2018-03-14fuzz_tests: set small subaddress lookahead for speedmoneromooo-monero1-0/+1
2018-03-05Stagenetstoffu1-1/+1
2018-01-26Readd copyright starting datexmr-eric1-1/+1
2018-01-26Update 2018 copyrightxmr-eric1-1/+1
2017-12-19tests: test wallets don't need a dummy temp file anymoremoneromooo-monero1-9/+1
2017-12-16move includes around to lessen overall loadmoneromooo-monero1-1/+1
2017-11-14move cryptonote command line options to cryptonote_coremoneromooo-monero1-1/+0
Those have no reason to be in a generic module
2017-06-24Add fuzz testing using american fuzzy lopmoneromooo-monero1-0/+110
Existing tests: block, transaction, signature, cold outputs, cold transaction. Data for these is in tests/data/fuzz. A convenience shell script is in contrib/fuzz_testing/fuzz.sh, eg: contrib/fuzz_testing/fuzz.sh signature The fuzzer will run indefinitely, ^C to stop. Fuzzing is currently supported for GCC only. I can't get CLANG to build Monero here as it dies on some system headers, so if someone wants to make it work on both, that'd be great. In particular, the __AFL_LOOP construct should be made to work so that a given run can fuzz multiple inputs, as the C++ load time is substantial.