1
0
mirror of https://github.com/mirror/wget.git synced 2025-04-24 04:05:05 +08:00

Add new fuzzer for the progress bar code

* Makefile.am: Add wget_progress_fuzzer.
* wget_progress_fuzzer.c: New file.
This commit is contained in:
Tim Rühsen 2019-12-12 13:08:10 +01:00
parent 221f1ba3ef
commit 34573bdf46
2 changed files with 156 additions and 10 deletions

View File

@ -1,4 +1,4 @@
AM_CFLAGS = $(WERROR_CFLAGS) $(WARN_CFLAGS)
AM_CFLAGS = -Wall -Wextra $(WERROR_CFLAGS) $(WARN_CFLAGS)
AM_CPPFLAGS = -I$(top_srcdir)/src -I$(srcdir) -I$(top_builddir)/lib -I$(top_srcdir)/lib \
-DSRCDIR=\"$(abs_srcdir)\"
LDADD = ../lib/libgnu.a \
@ -9,15 +9,16 @@ LDADD = ../lib/libgnu.a \
$(FUZZ_LIBS)
WGET_TESTS = \
wget_css_fuzzer$(EXEEXT) \
wget_cookie_fuzzer$(EXEEXT) \
wget_css_fuzzer$(EXEEXT) \
wget_ftpls_fuzzer$(EXEEXT) \
wget_html_fuzzer$(EXEEXT) \
wget_netrc_fuzzer$(EXEEXT) \
wget_options_fuzzer$(EXEEXT) \
wget_progress_fuzzer$(EXEEXT) \
wget_read_hunk_fuzzer$(EXEEXT) \
wget_robots_fuzzer$(EXEEXT) \
wget_url_fuzzer$(EXEEXT) \
wget_read_hunk_fuzzer$(EXEEXT)
wget_url_fuzzer$(EXEEXT)
if FUZZING
bin_PROGRAMS = $(WGET_TESTS)
@ -37,12 +38,12 @@ endif
../src/libunittest.a:
$(MAKE) $(AM_MAKEFLAGS) -C ../src libunittest.a
wget_css_fuzzer_SOURCES = wget_css_fuzzer.c $(MAIN)
wget_css_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_cookie_fuzzer_SOURCES = wget_cookie_fuzzer.c $(MAIN)
wget_cookie_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_css_fuzzer_SOURCES = wget_css_fuzzer.c $(MAIN)
wget_css_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_ftpls_fuzzer_SOURCES = wget_ftpls_fuzzer.c $(MAIN)
wget_ftpls_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
@ -55,15 +56,18 @@ wget_netrc_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_options_fuzzer_SOURCES = wget_options_fuzzer.c $(MAIN)
wget_options_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_progress_fuzzer_SOURCES = wget_progress_fuzzer.c $(MAIN)
wget_progress_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_read_hunk_fuzzer_SOURCES = wget_read_hunk_fuzzer.c $(MAIN)
wget_read_hunk_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_robots_fuzzer_SOURCES = wget_robots_fuzzer.c $(MAIN)
wget_robots_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_url_fuzzer_SOURCES = wget_url_fuzzer.c $(MAIN)
wget_url_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
wget_read_hunk_fuzzer_SOURCES = wget_read_hunk_fuzzer.c $(MAIN)
wget_read_hunk_fuzzer_LDADD = ../src/libunittest.a $(LDADD)
#EXTRA_DIST = $(wildcard *.options) $(wildcard *.dict) \
# $(wildcard *.in) $(wildcard *.repro)

142
fuzz/wget_progress_fuzzer.c Normal file
View File

@ -0,0 +1,142 @@
/*
* Copyright (c) 2017-2019 Free Software Foundation, Inc.
*
* This file is part of GNU Wget.
*
* GNU Wget is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* GNU Wget is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with Wget. If not, see <https://www.gnu.org/licenses/>.
*/
#include <config.h>
#include <sys/types.h>
#include <dirent.h> // opendir, readdir
#include <stdint.h> // uint8_t
#include <stdio.h> // fmemopen
#include <string.h> // strncmp
#include <stdlib.h> // free
#include <fcntl.h> // open flags
#include <unistd.h> // close
#include <setjmp.h> // longjmp, setjmp
#include "wget.h"
#undef fopen_wgetrc
#ifdef __cplusplus
extern "C" {
#endif
#include "progress.h"
// declarations for wget internal functions
int main_wget(int argc, const char **argv);
void cleanup(void);
FILE *fopen_wget(const char *pathname, const char *mode);
FILE *fopen_wgetrc(const char *pathname, const char *mode);
void exit_wget(int status);
#ifdef __cplusplus
}
#endif
#include "fuzzer.h"
FILE *fopen_wget(const char *pathname, const char *mode)
{
(void) pathname;
return fopen("/dev/null", mode);
}
FILE *fopen_wgetrc(const char *pathname, const char *mode)
{
(void) pathname;
(void) mode;
return NULL;
}
#ifdef FUZZING
void exit_wget(int status)
{
(void) status;
}
#endif
#define NAMEPOS (2 * sizeof(wgint) + sizeof(double))
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
void *progress;
if (size > 4096) // same as max_len = ... in .options file
return 0;
if (size < NAMEPOS)
return 0;
// CLOSE_STDERR
wgint start = ((wgint *) data)[0];
wgint end = ((wgint *) data)[1];
double dltime = ((wgint *) data)[2];
if (start < 0 || end < 0)
return 0;
if (start > end) {
wgint x = start;
start = end;
end = x;
}
// double dltime = ((double *) (data + 2 * sizeof(wgint)))[0];
char *filename = strndup((char *) (data + NAMEPOS), size - NAMEPOS);
// printf("%ld %ld %lf %s\n", start, end, dltime, filename);
set_progress_implementation("bar:force"); // [:force][:noscroll]
progress = progress_create (filename, start, end);
progress_update (progress, 0, dltime);
progress_update (progress, end - start, dltime);
progress_finish (progress, dltime);
set_progress_implementation("dot:default");// [:default|:binary|:mega|:giga]
progress = progress_create (filename, start, end);
progress_update (progress, 0, dltime);
progress_update (progress, end - start, dltime);
progress_finish (progress, dltime);
set_progress_implementation("dot:binary");// [:default|:binary|:mega|:giga]
progress = progress_create (filename, start, end);
progress_update (progress, 0, dltime);
progress_update (progress, end - start, dltime);
progress_finish (progress, dltime);
set_progress_implementation("dot:mega");// [:default|:binary|:mega|:giga]
progress = progress_create (filename, start, end);
progress_update (progress, 0, dltime);
progress_update (progress, end - start, dltime);
progress_finish (progress, dltime);
set_progress_implementation("dot:giga");// [:default|:binary|:mega|:giga]
progress = progress_create (filename, start, end);
progress_update (progress, 0, dltime);
progress_update (progress, end - start, dltime);
progress_finish (progress, dltime);
free(filename);
// RESTORE_STDERR
return 0;
}