tree 8c667c5968d7db292648ae0d951564d6da6902b2
parent 3a3552247ecb0bfb260a36d9da7a3bce7fdc3f8a
author David Benjamin <davidben@google.com> 1569530936 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1569599573 +0000

Bound the number of API calls in ssl_ctx_api.cc.

By spamming just two bytes, this fuzzer can bounce between
SSL_CTX_use_certificate and SSL_CTX_get0_certificate, which continually
runs d2i_X509 on some certificate.

Doing that nearly 400,000 times is not particularly useful. Bound the
number of API calls. Start with 10,000 and see if the fuzzers are still
unhappy.

Bug: oss-fuzz:17748
Change-Id: I074fa08475fffcb86c02e64dcb9c5c7c69bcda71
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/37765
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Adam Langley <agl@google.com>