mirror of https://github.com/google/oss-fuzz.git
53 lines
1.7 KiB
C++
53 lines
1.7 KiB
C++
// Copyright 2018 Google Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#include <fuzzer/FuzzedDataProvider.h>
|
|
|
|
#include <cstddef>
|
|
#include <cstdint>
|
|
#include <string>
|
|
|
|
#include "fuzzer_temp_file.h"
|
|
|
|
#include "libxml/xmlreader.h"
|
|
|
|
void ignore (void* ctx, const char* msg, ...) {
|
|
// Error handler to avoid spam of error messages from libxml parser.
|
|
}
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
|
|
xmlSetGenericErrorFunc(NULL, &ignore);
|
|
|
|
FuzzedDataProvider provider(data, size);
|
|
const int options = provider.ConsumeIntegral<int>();
|
|
|
|
// libxml does not expect more than 100 characters, let's go beyond that.
|
|
const std::string encoding = provider.ConsumeRandomLengthString(128);
|
|
auto file_contents = provider.ConsumeRemainingBytes<uint8_t>();
|
|
|
|
FuzzerTemporaryFile file(file_contents.data(), file_contents.size());
|
|
|
|
xmlTextReaderPtr xmlReader =
|
|
xmlReaderForFile(file.filename(), encoding.c_str(), options);
|
|
|
|
constexpr int kReadSuccessful = 1;
|
|
while (xmlTextReaderRead(xmlReader) == kReadSuccessful) {
|
|
xmlTextReaderNodeType(xmlReader);
|
|
xmlTextReaderConstValue(xmlReader);
|
|
}
|
|
|
|
xmlFreeTextReader(xmlReader);
|
|
return EXIT_SUCCESS;
|
|
}
|