c/minizip-ng
1
0
Fork 0
mirror of https://github.com/zlib-ng/minizip-ng synced 2025-03-28 21:13:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix and improve fuzzers

Browse Source
This commit is contained in:
Mikhail Khachayants 2024-11-15 00:21:08 +02:00 committed by Nathan Moinvaziri
parent 00d695db9b
commit d7f5fdd19a
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
test/fuzz/unzip_fuzzer.c
View File

@ -49,6 +49,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
if (!handle) if (!handle)
return 1; return 1;
mz_zip_set_recover(handle, (size & 0xE0) == 0xE0);
err = mz_zip_open(handle, stream, MZ_OPEN_MODE_READ); err = mz_zip_open(handle, stream, MZ_OPEN_MODE_READ);
if (err == MZ_OK) { if (err == MZ_OK) {

13
test/fuzz/zip_fuzzer.c
View File

@ -22,6 +22,7 @@ extern "C" {
/***************************************************************************/ /***************************************************************************/
#define MZ_FUZZ_TEST_FILENAME "foo" #define MZ_FUZZ_TEST_FILENAME "foo"
#define MZ_FUZZ_TEST_PWD "test123"
/***************************************************************************/ /***************************************************************************/
@ -37,6 +38,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
int64_t fuzz_pos = 0; int64_t fuzz_pos = 0;
int32_t fuzz_length = 0; int32_t fuzz_length = 0;
uint8_t *fuzz_buf = NULL; uint8_t *fuzz_buf = NULL;
const char *password = NULL;
fuzz_stream = mz_stream_mem_create(); fuzz_stream = mz_stream_mem_create();
if (!fuzz_stream) if (!fuzz_stream)
@ -77,6 +79,14 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
mz_stream_mem_delete(&fuzz_stream); mz_stream_mem_delete(&fuzz_stream);
return 1; return 1;
} }
err = mz_stream_mem_open(stream, MZ_FUZZ_TEST_FILENAME, MZ_OPEN_MODE_CREATE | MZ_OPEN_MODE_WRITE);
if (err != MZ_OK) {
mz_stream_mem_delete(&stream);
mz_stream_mem_delete(&fuzz_stream);
return 1;
}
handle = mz_zip_create(); handle = mz_zip_create();
if (!handle) { if (!handle) {
mz_stream_mem_delete(&stream); mz_stream_mem_delete(&stream);
@ -86,7 +96,8 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
err = mz_zip_open(handle, stream, MZ_OPEN_MODE_CREATE | MZ_OPEN_MODE_WRITE); err = mz_zip_open(handle, stream, MZ_OPEN_MODE_CREATE | MZ_OPEN_MODE_WRITE);
if (err == MZ_OK) { if (err == MZ_OK) {
err = mz_zip_entry_write_open(handle, &file_info, compress_level, 0, NULL); password = file_info.flag & MZ_ZIP_FLAG_ENCRYPTED ? MZ_FUZZ_TEST_PWD : NULL;
err = mz_zip_entry_write_open(handle, &file_info, compress_level, 0, password);
if (err == MZ_OK) { if (err == MZ_OK) {
mz_stream_mem_get_buffer_at_current(fuzz_stream, (const void **)&fuzz_buf); mz_stream_mem_get_buffer_at_current(fuzz_stream, (const void **)&fuzz_buf);
fuzz_pos = mz_stream_tell(fuzz_stream); fuzz_pos = mz_stream_tell(fuzz_stream);