ba99bdbf6f
In this commit, the simple fuzzing tests for the isc_lex_gettoken() and isc_lex_getmastertoken() functions have been added. As part of this commit, the initialization has been moved from fuzz.h constructor/destructor to LLVMFuzzerInitialize() in each fuzz test. The main.c of no-fuzzing and AFL modes have been modified to run the LLVMFuzzerInitialize() at the start of the main() function mimicking the libfuzzer mode of operation.
63 lines
1.4 KiB
C
63 lines
1.4 KiB
C
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
#include <isc/buffer.h>
|
|
#include <isc/lex.h>
|
|
#include <isc/mem.h>
|
|
#include <isc/util.h>
|
|
|
|
#include "fuzz.h"
|
|
|
|
int
|
|
LLVMFuzzerInitialize(int *argc __attribute__((unused)),
|
|
char ***argv __attribute__((unused)));
|
|
|
|
int
|
|
LLVMFuzzerTestOneInput(const uint8_t *data, size_t size);
|
|
|
|
static isc_mem_t *mctx = NULL;
|
|
static isc_lex_t *lex = NULL;
|
|
|
|
int
|
|
LLVMFuzzerInitialize(int *argc __attribute__((unused)),
|
|
char ***argv __attribute__((unused))) {
|
|
isc_result_t result;
|
|
|
|
isc_mem_create(&mctx);
|
|
|
|
result = isc_lex_create(mctx, 1024, &lex);
|
|
REQUIRE(result == ISC_R_SUCCESS);
|
|
|
|
return (0);
|
|
}
|
|
|
|
int
|
|
LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
|
|
isc_buffer_t buf;
|
|
isc_result_t result;
|
|
|
|
isc_buffer_constinit(&buf, data, size);
|
|
isc_buffer_add(&buf, size);
|
|
isc_buffer_setactive(&buf, size);
|
|
|
|
CHECK(isc_lex_openbuffer(lex, &buf));
|
|
|
|
do {
|
|
isc_token_t token;
|
|
result = isc_lex_gettoken(lex, 0, &token);
|
|
} while (result == ISC_R_SUCCESS);
|
|
|
|
return (0);
|
|
}
|