No public description

PiperOrigin-RevId: 617257551

e2e_tests/testdata/fuzz_tests_with_proto_inputs.cc

diff --git a/e2e_tests/testdata/fuzz_tests_with_proto_inputs.cc b/e2e_tests/testdata/fuzz_tests_with_proto_inputs.cc
index e257c3e..a205082 100644
--- a/e2e_tests/testdata/fuzz_tests_with_proto_inputs.cc
+++ b/e2e_tests/testdata/fuzz_tests_with_proto_inputs.cc
@@ -51,6 +51,7 @@
 using ::fuzztest::internal::Person;
 using ::fuzztest::internal::RoboCourier560Plan;
 using ::fuzztest::internal::SingleBytesField;
+using ::fuzztest::internal::TcpStateMachine;
 using ::fuzztest::internal::TestProtobuf;
 using ::fuzztest::internal::Vector;
 using ::fuzztest::internal::WebSearchResult;
@@ -1277,4 +1278,93 @@
 }
 FUZZ_TEST(ProtoPuzzles, PlayNim);
 
+TcpStateMachine::State ClosedStateEventHandler(TcpStateMachine::Event event) {
+  switch (event) {
+    case TcpStateMachine::USER_LISTEN:
+      return TcpStateMachine::LISTEN;
+    case TcpStateMachine::USER_CONNECT:
+      return TcpStateMachine::SYN_SENT;
+    default:
+      return TcpStateMachine::CLOSED;
+  }
+}
+
+TcpStateMachine::State ListenStateEventHandler(TcpStateMachine::Event event) {
+  switch (event) {
+    case TcpStateMachine::RCV_SYN:
+      return TcpStateMachine::SYN_RCVD;
+    default:
+      return TcpStateMachine::LISTEN;
+  }
+}
+
+TcpStateMachine::State SynRcvdStateEventHandler(TcpStateMachine::Event event) {
+  switch (event) {
+    case TcpStateMachine::RCV_ACK:
+      return TcpStateMachine::ESTABLISHED;
+    default:
+      return TcpStateMachine::SYN_RCVD;
+  }
+}
+
+TcpStateMachine::State SynSentStateEventHandler(TcpStateMachine::Event event) {
+  switch (event) {
+    case TcpStateMachine::RCV_SYN_ACK:
+      return TcpStateMachine::ESTABLISHED;
+    default:
+      return TcpStateMachine::SYN_SENT;
+  }
+}
+
+TcpStateMachine::State EstablishedStateEventHandler(
+    TcpStateMachine::Event event) {
+  return TcpStateMachine::ESTABLISHED;
+}
+
+void TcpProcessEvents(const TcpStateMachine& state_machine) {
+  auto state = state_machine.start_state();
+
+  if (state == TcpStateMachine::ESTABLISHED ||
+      state == TcpStateMachine::INVALID_STATE) {
+    return;
+  }
+
+  for (int i = 0; i < state_machine.event_size(); ++i) {
+    auto event = state_machine.event(i);
+    switch (state) {
+      case TcpStateMachine::CLOSED:
+        state = ClosedStateEventHandler(event);
+        break;
+      case TcpStateMachine::LISTEN:
+        state = ListenStateEventHandler(event);
+        break;
+      case TcpStateMachine::SYN_RCVD:
+        state = SynRcvdStateEventHandler(event);
+        break;
+      case TcpStateMachine::SYN_SENT:
+        state = SynSentStateEventHandler(event);
+        break;
+      case TcpStateMachine::ESTABLISHED:
+        state = EstablishedStateEventHandler(event);
+        break;
+      case TcpStateMachine::INVALID_STATE:
+        break;
+    }
+    if (state == TcpStateMachine::ESTABLISHED) {
+      Target();
+    }
+  }
+}
+
+FUZZ_TEST(ProtoPuzzles, TcpProcessEvents);
+
+TEST(ProtoPuzzles, TcpProcessEventsReproducer) {
+  TcpStateMachine state_machine;
+
+  state_machine.set_start_state(TcpStateMachine::CLOSED);
+  state_machine.add_event(TcpStateMachine::USER_LISTEN);
+  state_machine.add_event(TcpStateMachine::RCV_SYN);
+  state_machine.add_event(TcpStateMachine::RCV_ACK);
+  EXPECT_DEATH(TcpProcessEvents(state_machine), "SIGABRT");
+}
 }  // namespace

fuzztest/internal/test_protobuf.proto

diff --git a/fuzztest/internal/test_protobuf.proto b/fuzztest/internal/test_protobuf.proto
index fb3aeda..7c146f5 100644
--- a/fuzztest/internal/test_protobuf.proto
+++ b/fuzztest/internal/test_protobuf.proto
@@ -280,3 +280,26 @@
 message Matrix {
   repeated Vector columns = 1;
 }
+
+// A partial TCP state machine, modeling connection establishment
+message TcpStateMachine {
+  enum State {
+    INVALID_STATE = 0;
+    CLOSED = 1;
+    LISTEN = 2;
+    SYN_RCVD = 3;
+    SYN_SENT = 4;
+    ESTABLISHED = 5;
+  }
+
+  enum Event {
+    INVALID_EVENT = 0;
+    USER_LISTEN = 1;
+    USER_CONNECT = 2;
+    RCV_SYN = 3;
+    RCV_SYN_ACK = 4;
+    RCV_ACK = 5;
+  }
+  repeated Event event = 1 [packed = true];
+  optional State start_state = 2;
+}