Enable all curves (inc CECPQ2) during fuzzing. Change-Id: I8083e841de135e9ec244609b1c20f0280ce20072 Reviewed-on: https://boringssl-review.googlesource.com/c/34664 Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/ssl/t1_lib.cc b/ssl/t1_lib.cc index 140ab45..36ba114 100644 --- a/ssl/t1_lib.cc +++ b/ssl/t1_lib.cc
@@ -300,7 +300,7 @@ SSL_CURVE_X25519, SSL_CURVE_SECP256R1, SSL_CURVE_SECP384R1, -};; +}; Span<const uint16_t> tls1_get_grouplist(const SSL_HANDSHAKE *hs) { if (!hs->config->supported_group_list.empty()) {
diff --git a/ssl/test/fuzzer.h b/ssl/test/fuzzer.h index de058e5..f714d5d 100644 --- a/ssl/test/fuzzer.h +++ b/ssl/test/fuzzer.h
@@ -414,6 +414,13 @@ return false; } + static const int kCurves[] = {NID_CECPQ2, NID_X25519, NID_X9_62_prime256v1, + NID_secp384r1, NID_secp521r1}; + if (!SSL_CTX_set1_curves(ctx_.get(), kCurves, + OPENSSL_ARRAY_SIZE(kCurves))) { + return false; + } + SSL_CTX_set_early_data_enabled(ctx_.get(), 1); SSL_CTX_set_next_proto_select_cb(ctx_.get(), NPNSelectCallback, nullptr);