libmicrohttpd

HTTP/1.x server C library (MHD 1.x, stable)
Log | Files | Refs | Submodules | README | LICENSE

fuzz_auth_header.dict (2420B)


      1 # libFuzzer dictionary for fuzz_auth_header (GNU libmicrohttpd).
      2 #
      3 # The harness feeds byte 1.. as the raw value of an "Authorization:" header
      4 # into MHD_get_rq_dauth_params_() / MHD_get_rq_bauth_params_(), so every
      5 # token here is a fragment of that header value.  Byte 0 is a selector and
      6 # is not covered by the dictionary.
      7 
      8 # --- schemes ------------------------------------------------------------
      9 s_digest="Digest "
     10 s_basic="Basic "
     11 s_bearer="Bearer "
     12 s_negotiate="Negotiate "
     13 s_digest_nosp="Digest"
     14 s_digest_tab="Digest\x09"
     15 
     16 # --- separators / quoting ------------------------------------------------
     17 comma=","
     18 comma_sp=", "
     19 equals="="
     20 quote="\""
     21 empty_quoted="\"\""
     22 backslash="\\"
     23 escaped_quote="\\\""
     24 escaped_bs="\\\\"
     25 unterminated_quote="\"aaaa"
     26 sp=" "
     27 tab="\x09"
     28 
     29 # --- digest parameters ---------------------------------------------------
     30 p_username="username="
     31 p_username_q="username=\"user\""
     32 p_username_star="username*="
     33 p_username_star_v="username*=UTF-8''user"
     34 p_username_star_bad="username*=''"
     35 p_userhash="userhash="
     36 p_userhash_true="userhash=true"
     37 p_userhash_false="userhash=false"
     38 p_userhash_q="userhash=\"true\""
     39 p_realm="realm="
     40 p_realm_q="realm=\"TestRealm\""
     41 p_realm_empty="realm=\"\""
     42 p_nonce="nonce="
     43 p_nonce_q="nonce=\"0000\""
     44 p_uri="uri="
     45 p_uri_q="uri=\"/a\""
     46 p_response="response="
     47 p_response_q="response=\"00\""
     48 p_cnonce="cnonce="
     49 p_cnonce_q="cnonce=\"abcd\""
     50 p_nc="nc="
     51 p_nc_v="nc=00000001"
     52 p_nc_bad="nc=zzzzzzzz"
     53 p_opaque="opaque="
     54 p_qop="qop="
     55 p_algorithm="algorithm="
     56 p_unknown="frobnicate="
     57 
     58 # --- algorithm tokens ----------------------------------------------------
     59 a_md5="MD5"
     60 a_md5_sess="MD5-sess"
     61 a_sha256="SHA-256"
     62 a_sha256_sess="SHA-256-sess"
     63 a_sha512_256="SHA-512-256"
     64 a_sha512_256_sess="SHA-512-256-sess"
     65 a_sha512="SHA-512"
     66 a_sha1="SHA-1"
     67 a_case="sha-256"
     68 
     69 # --- qop tokens ----------------------------------------------------------
     70 q_auth="auth"
     71 q_auth_int="auth-int"
     72 q_both="auth,auth-int"
     73 q_quoted="qop=\"auth\""
     74 q_unknown="auth-xyz"
     75 
     76 # --- values --------------------------------------------------------------
     77 hex16="0123456789abcdef"
     78 hex32="0123456789abcdef0123456789abcdef"
     79 hex64="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
     80 hex128="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
     81 b64_user_pass="dXNlcjpwYXNz"
     82 b64_pad="YQ=="
     83 b64_bad="!!!!"
     84 pct="%41"
     85 pct_bad="%zz"