Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update fuzz target to ignore class injection (#7657) 

see https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47102
This commit is contained in:
psy 2022-05-02 17:12:20 +02:00 committed by GitHub
parent ee65beab15
commit 45377fdef2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
projects/logback/JoranFuzzer.java
View File

@ -22,7 +22,14 @@ public class JoranFuzzer {
}
public static void fuzzerTestOneInput(FuzzedDataProvider data) {
InputStream xmlcontent = new ByteArrayInputStream(data.consumeString(1000).getBytes());
String content = data.consumeString(1000);
// https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47102
if (content.contains("class=\"")) {
return;
}
InputStream xmlcontent = new ByteArrayInputStream(content.getBytes());
try {
configurator.doConfigure(xmlcontent);
logger.debug(data.consumeRemainingAsString());