fuzz_auth_header.dict (2420B)
1 # libFuzzer dictionary for fuzz_auth_header (GNU libmicrohttpd). 2 # 3 # The harness feeds byte 1.. as the raw value of an "Authorization:" header 4 # into MHD_get_rq_dauth_params_() / MHD_get_rq_bauth_params_(), so every 5 # token here is a fragment of that header value. Byte 0 is a selector and 6 # is not covered by the dictionary. 7 8 # --- schemes ------------------------------------------------------------ 9 s_digest="Digest " 10 s_basic="Basic " 11 s_bearer="Bearer " 12 s_negotiate="Negotiate " 13 s_digest_nosp="Digest" 14 s_digest_tab="Digest\x09" 15 16 # --- separators / quoting ------------------------------------------------ 17 comma="," 18 comma_sp=", " 19 equals="=" 20 quote="\"" 21 empty_quoted="\"\"" 22 backslash="\\" 23 escaped_quote="\\\"" 24 escaped_bs="\\\\" 25 unterminated_quote="\"aaaa" 26 sp=" " 27 tab="\x09" 28 29 # --- digest parameters --------------------------------------------------- 30 p_username="username=" 31 p_username_q="username=\"user\"" 32 p_username_star="username*=" 33 p_username_star_v="username*=UTF-8''user" 34 p_username_star_bad="username*=''" 35 p_userhash="userhash=" 36 p_userhash_true="userhash=true" 37 p_userhash_false="userhash=false" 38 p_userhash_q="userhash=\"true\"" 39 p_realm="realm=" 40 p_realm_q="realm=\"TestRealm\"" 41 p_realm_empty="realm=\"\"" 42 p_nonce="nonce=" 43 p_nonce_q="nonce=\"0000\"" 44 p_uri="uri=" 45 p_uri_q="uri=\"/a\"" 46 p_response="response=" 47 p_response_q="response=\"00\"" 48 p_cnonce="cnonce=" 49 p_cnonce_q="cnonce=\"abcd\"" 50 p_nc="nc=" 51 p_nc_v="nc=00000001" 52 p_nc_bad="nc=zzzzzzzz" 53 p_opaque="opaque=" 54 p_qop="qop=" 55 p_algorithm="algorithm=" 56 p_unknown="frobnicate=" 57 58 # --- algorithm tokens ---------------------------------------------------- 59 a_md5="MD5" 60 a_md5_sess="MD5-sess" 61 a_sha256="SHA-256" 62 a_sha256_sess="SHA-256-sess" 63 a_sha512_256="SHA-512-256" 64 a_sha512_256_sess="SHA-512-256-sess" 65 a_sha512="SHA-512" 66 a_sha1="SHA-1" 67 a_case="sha-256" 68 69 # --- qop tokens ---------------------------------------------------------- 70 q_auth="auth" 71 q_auth_int="auth-int" 72 q_both="auth,auth-int" 73 q_quoted="qop=\"auth\"" 74 q_unknown="auth-xyz" 75 76 # --- values -------------------------------------------------------------- 77 hex16="0123456789abcdef" 78 hex32="0123456789abcdef0123456789abcdef" 79 hex64="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef" 80 hex128="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" 81 b64_user_pass="dXNlcjpwYXNz" 82 b64_pad="YQ==" 83 b64_bad="!!!!" 84 pct="%41" 85 pct_bad="%zz"