Idea-Studios/libgit2
2
0
Fork 0
mirror of https://github.com/libgit2/libgit2.git synced 2026-06-22 06:26:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

fuzzers: Port config_file_fuzzer to the new in-memory backend

Browse Source
This commit is contained in:
Nelson Elhage
2018-10-09 02:33:03 +00:00
parent 2d449a1146
commit 416aafd14c
1 changed files with 18 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
fuzzers/config_file_fuzzer.c
View File

@@ -8,6 +8,7 @@
*/
#include <git2.h>
#include "config_backend.h"
#include <stdlib.h>
#include <stdio.h>
@@ -25,9 +26,6 @@ int foreach_cb(const git_config_entry *entry, void *payload)
return 0;
}
static char path[] = "/tmp/git.XXXXXX";
static int fd = -1;
int LLVMFuzzerInitialize(int *argc, char ***argv)
{
UNUSED(argc);
@@ -35,10 +33,6 @@ int LLVMFuzzerInitialize(int *argc, char ***argv)
if (git_libgit2_init() < 0)
abort();
fd = mkstemp(path);
if (fd < 0) {
abort();
}
return 0;
}
@@ -46,30 +40,29 @@ int LLVMFuzzerInitialize(int *argc, char ***argv)
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
git_config *cfg = NULL;
git_config_backend *backend = NULL;
int err = 0;
size_t total = 0;
if (ftruncate(fd, 0) !=0 ) {
abort();
}
if (lseek(fd, 0, SEEK_SET) != 0) {
abort();
err = git_config_new(&cfg);
if (err != 0) {
goto out;
}
while (total < size) {
ssize_t written = write(fd, data, size);
if (written < 0 && errno != EINTR)
abort();
if (written < 0)
continue;
total += written;
err = git_config_backend_from_string(&backend, (const char*)data, size);
if (err != 0) {
goto out;
}
err = git_config_add_backend(cfg, backend, 0, NULL, 0);
if (err != 0) {
goto out;
}
// Now owned by the config
backend = NULL;
err = git_config_open_ondisk(&cfg, path);
if (err == 0) {
git_config_foreach(cfg, foreach_cb, NULL);
git_config_free(cfg);
}
git_config_foreach(cfg, foreach_cb, NULL);
out:
git_config_backend_free(backend);
git_config_free(cfg);
return 0;
}