tests/fuzz/test-fuzz.c

   1 #include <stdio.h>
   2 #include <stdint.h>
   3 #include <stddef.h>
   4
   5 #include "blob.h"
   6 #include "blobmsg.h"
   7
   8 static void fuzz_blobmsg_parse(const uint8_t *data, size_t size)
   9 {
  10         enum {
  11                 FOO_MESSAGE,
  12                 FOO_LIST,
  13                 FOO_TESTDATA,
  14                 __FOO_MAX
  15         };
  16
  17         static const struct blobmsg_policy foo_policy[] = {
  18                 [FOO_MESSAGE] = {
  19                         .name = "message",
  20                         .type = BLOBMSG_TYPE_STRING,
  21                 },
  22                 [FOO_LIST] = {
  23                         .name = "list",
  24                         .type = BLOBMSG_TYPE_ARRAY,
  25                 },
  26                 [FOO_TESTDATA] = {
  27                         .name = "testdata",
  28                         .type = BLOBMSG_TYPE_TABLE,
  29                 },
  30         };
  31
  32         struct blob_attr *tb[__FOO_MAX];
  33
  34         blobmsg_parse(foo_policy, __FOO_MAX, tb, (uint8_t *)data, size);
  35         blobmsg_parse_array(foo_policy, __FOO_MAX, tb, (uint8_t *)data, size);
  36 }
  37
  38 static void fuzz_blob_parse(const uint8_t *data, size_t size)
  39 {
  40         enum {
  41                 FOO_ATTR_NESTED,
  42                 FOO_ATTR_BINARY,
  43                 FOO_ATTR_STRING,
  44                 FOO_ATTR_INT8,
  45                 FOO_ATTR_INT16,
  46                 FOO_ATTR_INT32,
  47                 FOO_ATTR_INT64,
  48                 FOO_ATTR_DOUBLE,
  49                 __FOO_ATTR_MAX
  50         };
  51
  52
  53         static const struct blob_attr_info foo_policy[__FOO_ATTR_MAX] = {
  54                 [FOO_ATTR_NESTED] = { .type = BLOB_ATTR_NESTED },
  55                 [FOO_ATTR_BINARY] = { .type = BLOB_ATTR_BINARY },
  56                 [FOO_ATTR_STRING] = { .type = BLOB_ATTR_STRING },
  57                 [FOO_ATTR_INT8] = { .type = BLOB_ATTR_INT8 },
  58                 [FOO_ATTR_INT16] = { .type = BLOB_ATTR_INT16 },
  59                 [FOO_ATTR_INT32] = { .type = BLOB_ATTR_INT32 },
  60                 [FOO_ATTR_INT64] = { .type = BLOB_ATTR_INT64 },
  61                 [FOO_ATTR_DOUBLE] = { .type = BLOB_ATTR_DOUBLE },
  62         };
  63
  64         struct blob_attr *foo[__FOO_ATTR_MAX];
  65         struct blob_attr *buf = (struct blob_attr *)data;
  66
  67         blob_parse_untrusted(buf, size, foo, foo_policy, __FOO_ATTR_MAX);
  68 }
  69
  70 int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
  71 {
  72         fuzz_blob_parse(data, size);
  73         fuzz_blobmsg_parse(data, size);
  74
  75         return 0;
  76 }