Huizi Yang | b3c85b6 | 2021-03-15 15:47:48 -0700 | [diff] [blame] | 1 | // SPDX-License-Identifier: Apache-2.0 |
| 2 | |
| 3 | #include <stddef.h> |
| 4 | #include <stdint.h> |
| 5 | |
Huizi Yang | b3c85b6 | 2021-03-15 15:47:48 -0700 | [diff] [blame] | 6 | #include "fuzzer/FuzzedDataProvider.h" |
hamzeh | 957e980 | 2021-10-22 14:56:58 -0700 | [diff] [blame] | 7 | #include <android-base/file.h> |
| 8 | #include <ziparchive/zip_writer.h> |
Huizi Yang | b3c85b6 | 2021-03-15 15:47:48 -0700 | [diff] [blame] | 9 | |
| 10 | // See current fuzz coverage here: |
| 11 | // https://android-coverage.googleplex.com/fuzz_targets/libziparchive_writer_fuzzer/index.html |
| 12 | |
| 13 | extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
| 14 | FuzzedDataProvider provider(data, size); |
hamzeh | 957e980 | 2021-10-22 14:56:58 -0700 | [diff] [blame] | 15 | std::unique_ptr<std::FILE, decltype(&fclose)> fp(tmpfile(), &fclose); |
Huizi Yang | b3c85b6 | 2021-03-15 15:47:48 -0700 | [diff] [blame] | 16 | if (!fp) { |
| 17 | return 0; |
| 18 | } |
| 19 | ZipWriter writer(fp.get()); |
| 20 | for (int i = 0; i < 2; i++) { |
| 21 | if (provider.remaining_bytes() == 0) { |
| 22 | break; |
| 23 | } |
| 24 | auto path = provider.ConsumeRandomLengthString(); |
| 25 | if (writer.StartEntry(path, path.size()) == 0) { |
| 26 | for (int j = 0; j < 2; j++) { |
| 27 | if (provider.remaining_bytes() == 0) { |
| 28 | break; |
| 29 | } |
| 30 | const size_t next_size = provider.ConsumeIntegralInRange<size_t>( |
| 31 | 0, provider.remaining_bytes()); |
| 32 | auto next_buf = provider.ConsumeBytes<uint8_t>(next_size); |
| 33 | writer.WriteBytes(next_buf.data(), next_buf.size()); |
| 34 | } |
| 35 | writer.FinishEntry(); |
| 36 | } |
| 37 | } |
| 38 | writer.Finish(); |
| 39 | return 0; |
| 40 | } |