Dynamic (#77)

tests/dynamic_fixtures/go/fuzz_variadic/benign.go

@@ -0,0 +1,19 @@
+// Phase 15 — fuzz-style variadic harness, benign.
+// Validates input length then echoes a fixed string.
+
+package entry
+
+import (
+	"fmt"
+	"os/exec"
+)
+
+func FuzzHandle(data []byte) error {
+	if len(data) > 1024 {
+		return fmt.Errorf("too long")
+	}
+	cmd := exec.Command("echo", "hello")
+	out, _ := cmd.CombinedOutput()
+	fmt.Print(string(out))
+	return nil
+}

tests/dynamic_fixtures/go/fuzz_variadic/go.mod

@@ -0,0 +1,3 @@
+module nyx_fuzz_variadic_fixture
+
+go 1.21

tests/dynamic_fixtures/go/fuzz_variadic/vuln.go

@@ -0,0 +1,18 @@
+// Phase 15 — fuzz-style variadic harness, vulnerable.
+// Takes raw bytes and pipes to /bin/sh -c.
+// Entry: FuzzHandle(data []byte) error  Cap: CODE_EXEC
+
+package entry
+
+import (
+	"fmt"
+	"os/exec"
+)
+
+func FuzzHandle(data []byte) error {
+	fmt.Print("__NYX_SINK_HIT__\n")
+	cmd := exec.Command("sh", "-c", "echo hello "+string(data))
+	out, _ := cmd.CombinedOutput()
+	fmt.Print(string(out))
+	return nil
+}