Wireshark-dev: Re: [Wireshark-dev] Fuzzing Wireshark with oss-fuzz

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 21 Dec 2016 11:43:18 -0800
On Dec 21, 2016, at 4:38 AM, Moshe <me@xxxxxxxxxxxxxxx> wrote:

> I apologize for my lack of clarity. Peter is correct, I am interested in fuzzing dissectors.
> 
> My plan is to have the sequence of raw bytes represent a pcap file.

I.e., represent a sequence of packets (of a particular type), rather than representing the raw contents of a file?

To do that, the generator of the fuzzed data would have to generate a sequence of bytes in the form of a sequence of {byte count, bytes} blobs, unless all packets were the same size.

That would have to assume the same encapsulation for all packets, e.g. Ethernet.