Files
tinyusb/test/fuzz/device
Javid Khan 3439e9c8de add ncm receive-path fuzz harness with out-of-bounds seed
folds the reproducer for the recv_validate_datagram bound into a small
self-contained fuzz target. it feeds a raw ntb straight into the validator
(the driver is pulled in so the static function is reachable) and ships the
crafted 64-byte ntb as a seed. the seed trips an asan heap-buffer-overflow
against the unpatched driver and is rejected cleanly with the wLength bound
in place.
2026-07-03 23:16:28 +05:30
..