blob: 4a71aa5a9f43f65925dab41e80644c3eb9b1a272 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
// Copyright 2018 Google Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include <fuzzer/FuzzedDataProvider.h>
#include <cstddef>
#include <cstdint>
#include <string>
#include "fuzzer_temp_file.h"
#include "libxml/xmlreader.h"
void ignore (void* ctx, const char* msg, ...) {
// Error handler to avoid spam of error messages from libxml parser.
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
xmlSetGenericErrorFunc(NULL, &ignore);
FuzzedDataProvider provider(data, size);
const int options = provider.ConsumeIntegral<int>();
// libxml does not expect more than 100 characters, let's go beyond that.
const std::string encoding = provider.ConsumeRandomLengthString(128);
auto file_contents = provider.ConsumeRemainingBytes<uint8_t>();
FuzzerTemporaryFile file(file_contents.data(), file_contents.size());
xmlTextReaderPtr xmlReader =
xmlReaderForFile(file.filename(), encoding.c_str(), options);
constexpr int kReadSuccessful = 1;
while (xmlTextReaderRead(xmlReader) == kReadSuccessful) {
xmlTextReaderNodeType(xmlReader);
xmlTextReaderConstValue(xmlReader);
}
xmlFreeTextReader(xmlReader);
return EXIT_SUCCESS;
}
|
