c/civetweb
1
0
Fork 0
mirror of https://github.com/civetweb/civetweb synced 2025-03-28 21:13:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

use LLVMFuzzerInitialize

Browse Source
This commit is contained in:
phi-go 2025-01-23 11:57:59 +01:00
parent 413387fcd8
commit b2c1d1bee7
1 changed files with 24 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
fuzztest/fuzzmain.c
View File

@ -45,9 +45,6 @@ unsigned short PORT_NUM_HTTP = 0; /* set dynamically */
}
static uint64_t call_count = 0;
/********************************************************/
/* Init CivetWeb server ... test with mock client */
/********************************************************/
@ -110,6 +107,17 @@ civetweb_init(void)
atexit(civetweb_exit);
}
int LLVMFuzzerInitialize(int *argc, char ***argv);
int
LLVMFuzzerInitialize(int *argc, char ***argv) {
// Silence unused args warning.
(void)(argc);
(void)(argv);
civetweb_init();
return 0;
}
#if defined(TEST_FUZZ1)
static int
@ -202,19 +210,12 @@ test_civetweb_client(const char *server,
return 0;
}
static int
LLVMFuzzerTestOneInput_URI(const uint8_t *data, size_t size)
{
static char URI[1024 * 64]; /* static, to avoid stack overflow */
if (call_count == 0) {
memset(URI, 0, sizeof(URI));
civetweb_init();
}
call_count++;
if (size < sizeof(URI)) {
if (size+1 < sizeof(URI)) {
memcpy(URI, data, size);
URI[size] = 0;
} else {
@ -230,11 +231,6 @@ LLVMFuzzerTestOneInput_URI(const uint8_t *data, size_t size)
static int
LLVMFuzzerTestOneInput_REQUEST(const uint8_t *data, size_t size)
{
if (call_count == 0) {
civetweb_init();
}
call_count++;
int r;
SOCKET sock = socket(AF_INET, SOCK_STREAM, 6);
if (sock == -1) {
@ -446,15 +442,22 @@ mock_server_init(void)
atexit(mock_server_exit);
}
int LLVMFuzzerInitialize(int *argc, char ***argv);
int
LLVMFuzzerInitialize(int *argc, char ***argv) {
// Silence unused args warning.
(void)(argc);
(void)(argv);
mock_server_init();
return 0;
}
static int
LLVMFuzzerTestOneInput_RESPONSE(const uint8_t *data, size_t size)
{
if (call_count == 0) {
mock_server_init();
}
call_count++;
if (size > sizeof(RESPONSE.data)) {
return 1;
}