mirror of
https://github.com/mirror/wget.git
synced 2024-12-30 23:10:13 +08:00
acfd9b4d56
* fuzz/Makefile.am: Do not include corpora in tarball * fuzz/main.c: SKIP if corpora directory isn't found (make check) The fuzz corpora are thousands of files, not needed for a standard build from a distribution tarball. The reproducers of former issues are being included for regression testing.
155 lines
3.5 KiB
C
155 lines
3.5 KiB
C
/*
|
|
* Copyright(c) 2017-2018 Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of GNU Wget.
|
|
*
|
|
* GNU Wget is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GNU Wget is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Wget. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <config.h>
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <stdint.h>
|
|
#include <string.h>
|
|
#include <fcntl.h>
|
|
|
|
#include "fuzzer.h"
|
|
#include "utils.h"
|
|
|
|
#ifdef TEST_RUN
|
|
|
|
#include <dirent.h>
|
|
|
|
#ifdef _WIN32
|
|
# define SLASH '\\'
|
|
#else
|
|
# define SLASH '/'
|
|
#endif
|
|
|
|
static int test_all_from(const char *dirname)
|
|
{
|
|
DIR *dirp;
|
|
|
|
if ((dirp = opendir(dirname))) {
|
|
struct dirent *dp;
|
|
|
|
while ((dp = readdir(dirp))) {
|
|
if (*dp->d_name == '.') continue;
|
|
|
|
char fname[strlen(dirname) + strlen(dp->d_name) + 2];
|
|
snprintf(fname, sizeof(fname), "%s/%s", dirname, dp->d_name);
|
|
|
|
struct file_memory *fmem;
|
|
if ((fmem = wget_read_file(fname))) {
|
|
printf("testing %ld bytes from '%s'\n", fmem->length, fname);
|
|
LLVMFuzzerTestOneInput((uint8_t *)fmem->content, fmem->length);
|
|
wget_read_file_free(fmem);
|
|
}
|
|
}
|
|
closedir(dirp);
|
|
return 0;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
// if VALGRIND testing is enabled, we have to call ourselves with valgrind checking
|
|
const char *valgrind = getenv("VALGRIND_TESTS");
|
|
const char *target;
|
|
size_t target_len;
|
|
|
|
if (!valgrind || !*valgrind || !strcmp(valgrind, "0")) {
|
|
// fallthrough
|
|
}
|
|
else if (!strcmp(valgrind, "1")) {
|
|
char cmd[strlen(argv[0]) + 256];
|
|
|
|
snprintf(cmd, sizeof(cmd), "VALGRIND_TESTS=\"\" valgrind --error-exitcode=301 --leak-check=yes --show-reachable=yes --track-origins=yes %s", argv[0]);
|
|
return system(cmd) != 0;
|
|
} else {
|
|
char cmd[strlen(valgrind) + strlen(argv[0]) + 32];
|
|
|
|
snprintf(cmd, sizeof(cmd), "VALGRIND_TESTS="" %s %s", valgrind, argv[0]);
|
|
return system(cmd) != 0;
|
|
}
|
|
|
|
if ((target = strrchr(argv[0], SLASH)))
|
|
target = strrchr(target, '/');
|
|
else
|
|
target = strrchr(argv[0], '/');
|
|
target = target ? target + 1 : argv[0];
|
|
|
|
if (strncmp(target, "lt-", 3) == 0)
|
|
target += 3;
|
|
|
|
target_len = strlen(target);
|
|
|
|
#ifdef _WIN32
|
|
target_len -= 4; // ignore .exe
|
|
#endif
|
|
|
|
{
|
|
int rc;
|
|
char corporadir[sizeof(SRCDIR) + 1 + target_len + 8];
|
|
snprintf(corporadir, sizeof(corporadir), SRCDIR "/%.*s.in", (int) target_len, target);
|
|
|
|
rc = test_all_from(corporadir);
|
|
if (rc)
|
|
fprintf(stderr, "Failed to find %s\n", corporadir);
|
|
|
|
snprintf(corporadir, sizeof(corporadir), SRCDIR "/%.*s.repro", (int) target_len, target);
|
|
if (test_all_from(corporadir) && rc)
|
|
return 77; // SKIP
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
#else
|
|
|
|
#ifndef __AFL_LOOP
|
|
static int __AFL_LOOP(int n)
|
|
{
|
|
static int first = 1;
|
|
|
|
if (first) {
|
|
first = 0;
|
|
return n && --n > 0;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
int ret;
|
|
unsigned char buf[64 * 1024];
|
|
|
|
while (__AFL_LOOP(10000)) { // only works with clang - we have to use 1 because static/global vars in wget
|
|
ret = fread(buf, 1, sizeof(buf), stdin);
|
|
if (ret < 0)
|
|
return 0;
|
|
|
|
LLVMFuzzerTestOneInput(buf, ret);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
#endif /* #ifdef TEST_RUN */
|