DGNum/libubox
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tests: fuzz: fuzz _len variants of checking methods

Browse source 
In order to increase test coverage.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
This commit is contained in:
Petr Štetiar 2019-12-11 06:35:17 +01:00
parent b0e21553ae
commit 586ce031ea
1 changed files with 24 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
tests/fuzz/test-fuzz.c
View file

@ -1,10 +1,13 @@
#include <stdio.h>
#include <stdint.h>
#include <stddef.h>
#include <limits.h>
#include "blob.h"
#include "blobmsg.h"
#define BLOBMSG_TYPE_TROUBLE INT_MAX
static void fuzz_blobmsg_parse(const uint8_t *data, size_t size)
{
enum {
@ -14,6 +17,19 @@ static void fuzz_blobmsg_parse(const uint8_t *data, size_t size)
__FOO_MAX
};
static const int blobmsg_type[] = {
BLOBMSG_TYPE_UNSPEC,
BLOBMSG_TYPE_ARRAY,
BLOBMSG_TYPE_TABLE,
BLOBMSG_TYPE_STRING,
BLOBMSG_TYPE_INT64,
BLOBMSG_TYPE_INT32,
BLOBMSG_TYPE_INT16,
BLOBMSG_TYPE_INT8,
BLOBMSG_TYPE_DOUBLE,
BLOBMSG_TYPE_TROUBLE,
};
static const struct blobmsg_policy foo_policy[] = {
[FOO_MESSAGE] = {
.name = "message",
@ -33,6 +49,14 @@ static void fuzz_blobmsg_parse(const uint8_t *data, size_t size)
blobmsg_parse(foo_policy, __FOO_MAX, tb, (uint8_t *)data, size);
blobmsg_parse_array(foo_policy, __FOO_MAX, tb, (uint8_t *)data, size);
blobmsg_check_attr_len((struct blob_attr *)data, false, size);
blobmsg_check_attr_len((struct blob_attr *)data, true, size);
for (size_t i=0; i < ARRAY_SIZE(blobmsg_type); i++) {
blobmsg_check_array_len((struct blob_attr *)data, blobmsg_type[i], size);
blobmsg_check_attr_list_len((struct blob_attr *)data, blobmsg_type[i], size);
}
}
static void fuzz_blob_parse(const uint8_t *data, size_t size)