diff options
author | Maksym Vatsyk <maksym.vatsyk@leviathansecurity.com> | 2023-12-04 17:23:24 +0100 |
---|---|---|
committer | Jia Tan <jiat0218@gmail.com> | 2023-12-07 20:06:57 +0800 |
commit | 7ca8c9869df82756c3128c4fcf1058da4d18aa48 (patch) | |
tree | 598fbeca970dc95913adf93fda95741d6f0b9769 /tests/ossfuzz/fuzz_decode_alone.c | |
parent | Tests: Update OSS-Fuzz Makefile. (diff) | |
download | xz-7ca8c9869df82756c3128c4fcf1058da4d18aa48.tar.xz |
Tests: Add fuzz_decode_alone OSS-Fuzz target
This fuzz target that handles LZMA alone decoding. A new fuzz
dictionary .dict was also created with common LZMA header values to
help speed up the discovery of valid headers.
Diffstat (limited to 'tests/ossfuzz/fuzz_decode_alone.c')
-rw-r--r-- | tests/ossfuzz/fuzz_decode_alone.c | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/tests/ossfuzz/fuzz_decode_alone.c b/tests/ossfuzz/fuzz_decode_alone.c new file mode 100644 index 00000000..d07874bc --- /dev/null +++ b/tests/ossfuzz/fuzz_decode_alone.c @@ -0,0 +1,41 @@ +/////////////////////////////////////////////////////////////////////////////// +// +/// \file fuzz_decode_auto.c +/// \brief Fuzz test program for liblzma lzma_auto_decoder() +// +// Author: Maksym Vatsyk +// +// Based on Lasse Collin's original fuzzer for liblzma +// +// This file has been put into the public domain. +// You can do whatever you want with this file. +// +/////////////////////////////////////////////////////////////////////////////// + +#include <inttypes.h> +#include <stdlib.h> +#include <stdio.h> +#include "lzma.h" +#include "fuzz_common.h" + + +extern int +LLVMFuzzerTestOneInput(const uint8_t *inbuf, size_t inbuf_size) +{ + lzma_stream strm = LZMA_STREAM_INIT; + // Initialize a LZMA alone decoder using the memory usage limit + // defined in fuzz_common.h + if (lzma_alone_decoder(&strm, MEM_LIMIT) != LZMA_OK) { + // This should never happen unless the system has + // no free memory or address space to allow the small + // allocations that the initialization requires. + fprintf(stderr, "lzma_alone_decoder() failed\n"); + abort(); + } + + fuzz_code(&strm, inbuf, inbuf_size); + + // Free the allocated memory. + lzma_end(&strm); + return 0; +} |