fuzz_http3serverreq: Read multiple times before sending data

ngtcp2 · Jan 3, 2025 · eb6a93c · eb6a93c
1 parent 9ef874f
commit eb6a93c
Showing 1 changed file with 13 additions and 10 deletions.
diff --git a/fuzz/fuzz_http3serverreq.cc b/fuzz/fuzz_http3serverreq.cc
@@ -279,16 +279,19 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
   }
 
   for (; fuzzed_data_provider.remaining_bytes() > 0;) {
-    auto stream_id = fuzzed_data_provider.ConsumeIntegralInRange<int64_t>(
-      0, NGHTTP3_MAX_VARINT);
-    auto chunk_size = fuzzed_data_provider.ConsumeIntegral<size_t>();
-    auto chunk = fuzzed_data_provider.ConsumeBytes<uint8_t>(chunk_size);
-    auto fin = fuzzed_data_provider.ConsumeBool();
-
-    nread = nghttp3_conn_read_stream(conn, stream_id, chunk.data(),
-                                     chunk.size(), fin);
-    if (nread < 0) {
-      goto fin;
+    for (; fuzzed_data_provider.remaining_bytes() > 0 &&
+           fuzzed_data_provider.ConsumeBool();) {
+      auto stream_id = fuzzed_data_provider.ConsumeIntegralInRange<int64_t>(
+        0, NGHTTP3_MAX_VARINT);
+      auto chunk_size = fuzzed_data_provider.ConsumeIntegral<size_t>();
+      auto chunk = fuzzed_data_provider.ConsumeBytes<uint8_t>(chunk_size);
+      auto fin = fuzzed_data_provider.ConsumeBool();
+
+      nread = nghttp3_conn_read_stream(conn, stream_id, chunk.data(),
+                                       chunk.size(), fin);
+      if (nread < 0) {
+        goto fin;
+      }
     }
 
     if (set_stream_priorities(conn, &fuzzed_data_provider) != 0) {