aboutsummaryrefslogtreecommitdiff
path: root/tests/ossfuzz/fuzz_decode_alone.c
diff options
context:
space:
mode:
authorMaksym Vatsyk <maksym.vatsyk@leviathansecurity.com>2023-12-04 17:23:24 +0100
committerJia Tan <jiat0218@gmail.com>2023-12-07 20:06:57 +0800
commit7ca8c9869df82756c3128c4fcf1058da4d18aa48 (patch)
tree598fbeca970dc95913adf93fda95741d6f0b9769 /tests/ossfuzz/fuzz_decode_alone.c
parentTests: Update OSS-Fuzz Makefile. (diff)
downloadxz-7ca8c9869df82756c3128c4fcf1058da4d18aa48.tar.xz
Tests: Add fuzz_decode_alone OSS-Fuzz target
This fuzz target that handles LZMA alone decoding. A new fuzz dictionary .dict was also created with common LZMA header values to help speed up the discovery of valid headers.
Diffstat (limited to '')
-rw-r--r--tests/ossfuzz/fuzz_decode_alone.c41
1 files changed, 41 insertions, 0 deletions
diff --git a/tests/ossfuzz/fuzz_decode_alone.c b/tests/ossfuzz/fuzz_decode_alone.c
new file mode 100644
index 00000000..d07874bc
--- /dev/null
+++ b/tests/ossfuzz/fuzz_decode_alone.c
@@ -0,0 +1,41 @@
+///////////////////////////////////////////////////////////////////////////////
+//
+/// \file fuzz_decode_auto.c
+/// \brief Fuzz test program for liblzma lzma_auto_decoder()
+//
+// Author: Maksym Vatsyk
+//
+// Based on Lasse Collin's original fuzzer for liblzma
+//
+// This file has been put into the public domain.
+// You can do whatever you want with this file.
+//
+///////////////////////////////////////////////////////////////////////////////
+
+#include <inttypes.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include "lzma.h"
+#include "fuzz_common.h"
+
+
+extern int
+LLVMFuzzerTestOneInput(const uint8_t *inbuf, size_t inbuf_size)
+{
+ lzma_stream strm = LZMA_STREAM_INIT;
+ // Initialize a LZMA alone decoder using the memory usage limit
+ // defined in fuzz_common.h
+ if (lzma_alone_decoder(&strm, MEM_LIMIT) != LZMA_OK) {
+ // This should never happen unless the system has
+ // no free memory or address space to allow the small
+ // allocations that the initialization requires.
+ fprintf(stderr, "lzma_alone_decoder() failed\n");
+ abort();
+ }
+
+ fuzz_code(&strm, inbuf, inbuf_size);
+
+ // Free the allocated memory.
+ lzma_end(&strm);
+ return 0;
+}