package config

import "testing"

// FuzzParseCIDROrIP guards against a crash in the
// VIBESONIC_EXTAUTH_TRUSTED_SOURCES parser, which is security-sensitive:
// it decides which peers are trusted to assert an authenticated
// identity via external auth.
func FuzzParseCIDROrIP(f *testing.F) {
	f.Add("127.0.0.1/32")
	f.Add("10.0.0.0/8")
	f.Add("::1")
	f.Add("fd00::/8")
	f.Add("")
	f.Add("not-an-ip")
	f.Add("127.0.0.1/99")
	f.Add("999.999.999.999")
	f.Add("::/0")

	f.Fuzz(func(t *testing.T, s string) {
		defer func() {
			if r := recover(); r != nil {
				t.Fatalf("parseCIDROrIP panicked on %q: %v", s, r)
			}
		}()
		_, _ = parseCIDROrIP(s)
	})
}