1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <stdint.h>
#include <tuple>
#include "base/check.h"
#include "base/containers/span.h"
#include "base/files/file_path.h"
#include "base/files/file_util.h"
#include "base/test/bind.h"
#include "sql/database.h"
#include "sql/recovery.h"
#include "sql/statement.h"
namespace {
// Does initialization and holds state that's shared across all runs.
class Environment {
public:
Environment() {
CHECK(base::CreateTemporaryFile(&data_file_path_));
logging::SetMinLogLevel(logging::LOG_FATAL);
}
~Environment() { base::DeleteFile(data_file_path_); }
const base::FilePath& data_file_path() const { return data_file_path_; }
private:
base::FilePath data_file_path_;
};
} // namespace
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
static Environment env;
// Prepare fuzzed data file.
CHECK(base::WriteFile(env.data_file_path(), base::make_span(data, size)));
// Load database. Check there's no unrecoverable error.
sql::DatabaseOptions options;
sql::Database database(options);
bool should_attempt_recovery = false;
database.set_error_callback(
base::BindLambdaForTesting([&](int extended_error, sql::Statement*) {
should_attempt_recovery = sql::BuiltInRecovery::ShouldAttemptRecovery(
&database, extended_error);
}));
std::ignore = database.Open(env.data_file_path());
// Select a recovery strategy pseudorandomly.
auto strategy =
size % 2 == 0
? sql::BuiltInRecovery::Strategy::kRecoverOrRaze
: sql::BuiltInRecovery::Strategy::kRecoverWithMetaVersionOrRaze;
// Ensure that we remember to update the fuzzer if more strategies are added.
switch (strategy) {
case sql::BuiltInRecovery::Strategy::kRecoverOrRaze:
case sql::BuiltInRecovery::Strategy::kRecoverWithMetaVersionOrRaze:
break;
}
// Attempt recovery.
if (should_attempt_recovery) {
database.reset_error_callback();
std::ignore = sql::BuiltInRecovery::RecoverDatabase(&database, strategy);
}
return 0;
}
|
