blob: d07874bc55a4bd7ccbe0e339f3d01180e63b5e32 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
///////////////////////////////////////////////////////////////////////////////
//
/// \file fuzz_decode_auto.c
/// \brief Fuzz test program for liblzma lzma_auto_decoder()
//
// Author: Maksym Vatsyk
//
// Based on Lasse Collin's original fuzzer for liblzma
//
// This file has been put into the public domain.
// You can do whatever you want with this file.
//
///////////////////////////////////////////////////////////////////////////////
#include <inttypes.h>
#include <stdlib.h>
#include <stdio.h>
#include "lzma.h"
#include "fuzz_common.h"
extern int
LLVMFuzzerTestOneInput(const uint8_t *inbuf, size_t inbuf_size)
{
lzma_stream strm = LZMA_STREAM_INIT;
// Initialize a LZMA alone decoder using the memory usage limit
// defined in fuzz_common.h
if (lzma_alone_decoder(&strm, MEM_LIMIT) != LZMA_OK) {
// This should never happen unless the system has
// no free memory or address space to allow the small
// allocations that the initialization requires.
fprintf(stderr, "lzma_alone_decoder() failed\n");
abort();
}
fuzz_code(&strm, inbuf, inbuf_size);
// Free the allocated memory.
lzma_end(&strm);
return 0;
}
|
