More fuzzing tests and vectors

pgpainless-sop/src/test/java/org/pgpainless/sop/fuzzing/AsciiArmorFuzzTest.java

@@ -18,7 +18,9 @@ public class AsciiArmorFuzzTest {
 
     private final SOP sop = new SOPImpl();
 
-    @FuzzTest()
+    @FuzzTest(
+            maxDuration = "60s"
+    )
     public void armorAndDearmorData(FuzzedDataProvider data) throws IOException {
         byte[] bytes = data.consumeBytes(1024);
 

pgpainless-sop/src/test/java/org/pgpainless/sop/fuzzing/EncryptedMessageFuzzingTest.java

@@ -1,3 +1,7 @@
+// SPDX-FileCopyrightText: 2025 Paul Schaub <vanitasvitae@fsfe.org>
+//
+// SPDX-License-Identifier: Apache-2.0
+
 package org.pgpainless.sop.fuzzing;
 
 import com.code_intelligence.jazzer.api.FuzzedDataProvider;
@@ -67,7 +71,9 @@ public class EncryptedMessageFuzzingTest {
         return keys;
     }
 
-    @FuzzTest
+    @FuzzTest(
+            maxDuration = "60s"
+    )
     public void decryptFuzzedMessage(FuzzedDataProvider provider) {
         byte[] ciphertext = provider.consumeBytes(8192);
         if (ciphertext.length == 0) {

pgpainless-sop/src/test/java/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTest.java

@@ -0,0 +1,44 @@
+// SPDX-FileCopyrightText: 2025 Paul Schaub <vanitasvitae@fsfe.org>
+//
+// SPDX-License-Identifier: Apache-2.0
+
+package org.pgpainless.sop.fuzzing;
+
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import com.code_intelligence.jazzer.junit.FuzzTest;
+import org.bouncycastle.bcpg.BCPGInputStream;
+import org.bouncycastle.bcpg.UnsupportedPacketVersionException;
+import org.bouncycastle.openpgp.PGPObjectFactory;
+import org.bouncycastle.openpgp.PGPPublicKeyRing;
+import org.bouncycastle.openpgp.bc.BcPGPObjectFactory;
+
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+
+public class PublicKeyPacketFuzzTest {
+
+    @FuzzTest(maxDuration = "30m")
+    public void parsePublicKeyPacket(FuzzedDataProvider provider)
+    {
+        byte[] encoding = provider.consumeBytes(8192);
+        if (encoding.length == 0) {
+            return;
+        }
+
+        ByteArrayInputStream bIn = new ByteArrayInputStream(encoding);
+        BCPGInputStream pIn = new BCPGInputStream(bIn);
+        PGPObjectFactory objFac = new BcPGPObjectFactory(pIn);
+        try {
+            Object next = objFac.nextObject();
+            if (next == null) return;
+
+            PGPPublicKeyRing pubKey = (PGPPublicKeyRing) next;
+        } catch (IOException e) {
+            // ignore
+        } catch (UnsupportedPacketVersionException e) {
+            // ignore
+        } catch (ClassCastException e) {
+            // ignore
+        }
+    }
+}

pgpainless-sop/src/test/java/org/pgpainless/sop/fuzzing/SecretKeyPacketFuzzTest.java

@@ -0,0 +1,44 @@
+// SPDX-FileCopyrightText: 2025 Paul Schaub <vanitasvitae@fsfe.org>
+//
+// SPDX-License-Identifier: Apache-2.0
+
+package org.pgpainless.sop.fuzzing;
+
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import com.code_intelligence.jazzer.junit.FuzzTest;
+import org.bouncycastle.bcpg.BCPGInputStream;
+import org.bouncycastle.bcpg.UnsupportedPacketVersionException;
+import org.bouncycastle.openpgp.PGPObjectFactory;
+import org.bouncycastle.openpgp.PGPSecretKeyRing;
+import org.bouncycastle.openpgp.bc.BcPGPObjectFactory;
+
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+
+public class SecretKeyPacketFuzzTest {
+
+    @FuzzTest(maxDuration = "30m")
+    public void parseSecretKeyPacket(FuzzedDataProvider provider)
+    {
+        byte[] encoding = provider.consumeBytes(8192);
+        if (encoding.length == 0) {
+            return;
+        }
+
+        ByteArrayInputStream bIn = new ByteArrayInputStream(encoding);
+        BCPGInputStream pIn = new BCPGInputStream(bIn);
+        PGPObjectFactory objFac = new BcPGPObjectFactory(pIn);
+        try {
+            Object next = objFac.nextObject();
+            if (next == null) return;
+
+            PGPSecretKeyRing secKey = (PGPSecretKeyRing) next;
+        } catch (IOException e) {
+            // ignore
+        } catch (UnsupportedPacketVersionException e) {
+            // ignore
+        } catch (ClassCastException e) {
+            // ignore
+        }
+    }
+}

pgpainless-sop/src/test/java/org/pgpainless/sop/fuzzing/SignatureFuzzTest.java

@@ -270,7 +270,7 @@ public class SignatureFuzzTest {
             "-----END PGP PUBLIC KEY BLOCK-----\n";
 
     @FuzzTest(
-            //maxDuration = "60s"
+            maxDuration = "60s"
     )
     public void verifyFuzzedSig(FuzzedDataProvider provider) throws IOException {
         byte[] sig = provider.consumeBytes(1024);

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/EncryptedMessageFuzzingTestInputs/decryptFuzzedMessage/crash-72aacd2d82d3c3fa750807ad1138e6a566996f04

@@ -0,0 +1 @@
+ÃÑóæqP\Ù±!J]÷µ,Ê¥‡tÓ¶Ò@
:¨0‘.sd³±Ÿ¢å$X“<58>úÝ,·bc«v7
îG‡

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/ed25519_v4.pgp

@@ -0,0 +1 @@
+Ζ&hp‡xπΥ‰	ΗΊ›Σπ"µϋ^<5E><11>Έh­κεeh„(ΐύ

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/nistP256ECDH_v4.pgp

@@ -0,0 +1 @@
+фVhp┤*├Hн=
$И■;а
*вnх╣(У╧²cчЩy▐╨╝НЭ4,▒sU;хТь эй#!┘прA╩gДjL< ▐B▌7?≥


pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/nistP256ECDSA_v4.pgp

@@ -0,0 +1,2 @@
+ÆRhp‡*†HÎ=
™-ä $öí5?»<0C>¡¥xÄH4—ÅÌ
t?“Ïè’%<25>[sTpXiý›ý
+8ãG:I‚)I/a¥¦"‡ÌyA9

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/parsePublicKeyPacket/crash-972998632851a93af5c647ad0f8f684afbb6e788

@@ -0,0 +1 @@
+<EFBFBD><03>vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/parsePublicKeyPacket/crash-fd8f91587a20a22513ee536aec3411052e5b3217

@@ -0,0 +1 @@
+<EFBFBD>+

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/x25519Legacy_v4.pgp

@@ -0,0 +1,2 @@
+Æ8hp‡
++

—U


@Vë‡Iü¹Ðˆæ¨£1]ŠýÀ›êø‹Ù<E280B9>a¦¸_l‰4J


pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/x25519_v4.pgp

@@ -0,0 +1 @@
+Æ&hp‡ó^ñö‹oƒÈëuGɤo"C8|±¸šC‡Ë<Qö£H

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/PublicKeyPacketFuzzTestInputs/x448_v4.pgp

@@ -0,0 +1 @@
+Æ>hp‡EN¸¤âú.-<2D>†?þFÏB­MÚ_-'ň[k® ùq<C3B9>nù³Q»ÐêԪ࣊³&[Òm¦YËÓ

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/SecretKeyPacketFuzzTestInputs/parseSecretKeyPacket/crash-4fbc082c98d268e4495e09d40912053a9c08b896

@@ -0,0 +1 @@
+｢ｮ

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/SecretKeyPacketFuzzTestInputs/parseSecretKeyPacket/crash-56fb7129479f381d7cfd4598b540d3b753730ffc

@@ -0,0 +1 @@
+<EFBFBD>

pgpainless-sop/src/test/resources/org/pgpainless/sop/fuzzing/SecretKeyPacketFuzzTestInputs/parseSecretKeyPacket/crash-6c04193b9d8991eec00fdef05735bfed376c0f6c

@@ -0,0 +1 @@
+:<3A>: