navigine/jq
1
0 Fork 0
mirror of https://github.com/jqlang/jq.git synced 2026-10-30 10:06:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

test: add jv_dump to extended fuzzer

Browse Source 
Signed-off-by: David Korczynski <david@adalogics.com>
This commit is contained in:
David Korczynski authored and Emanuele Torre committed 2023-11-28 20:36:59 +01:00
1 parent 44300e4310
commit eb3b5654bb
1 file changed
+7 -1
Download Patch File Download Diff File Expand all files Collapse all files
tests/jq_fuzz_parse_extended.c
+7 -1
View File
@@ -5,13 +5,16 @@
#include "jv.h" #include "jv.h"
int LLVMFuzzerTestOneInput(uint8_t *data, size_t size) { int LLVMFuzzerTestOneInput(uint8_t *data, size_t size) {
if (size < 4) { if (size < 8) {
return 0; return 0;
} }
int fuzz_flags = *(int*)data; int fuzz_flags = *(int*)data;
data += 4; data += 4;
size -= 4; size -= 4;
int dump_flags = *(int*)data;
data += 4;
size -= 4;
// Creat null-terminated string // Creat null-terminated string
char *null_terminated = (char *)malloc(size + 1); char *null_terminated = (char *)malloc(size + 1);
@@ -20,6 +23,9 @@ int LLVMFuzzerTestOneInput(uint8_t *data, size_t size) {
// Fuzzer entrypoint // Fuzzer entrypoint
jv res = jv_parse_custom_flags(null_terminated, fuzz_flags); jv res = jv_parse_custom_flags(null_terminated, fuzz_flags);
if (jv_is_valid(res)) {
jv_dump(res, dump_flags);
}
jv_free(res); jv_free(res);
// Free the null-terminated string // Free the null-terminated string