1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
// Copyright 2017 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/utility/safe_browsing/mac/hfs.h"
#include <stddef.h>
#include <stdint.h>
#include <memory>
#include <tuple>
#include <vector>
#include "base/containers/span.h"
#include "chrome/utility/safe_browsing/mac/read_stream.h"
#include "testing/libfuzzer/libfuzzer_exports.h"
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
// SAFETY: libfuzzer guarantees a valid pointer and size pair.
safe_browsing::dmg::MemoryReadStream input(
UNSAFE_BUFFERS(base::span(data, size)));
safe_browsing::dmg::HFSIterator hfs_iterator(&input);
if (!hfs_iterator.Open())
return 0;
std::vector<uint8_t> buffer(getpagesize(), 0);
while (hfs_iterator.Next()) {
// Test accessing properties.
std::ignore = hfs_iterator.IsSymbolicLink();
std::ignore = hfs_iterator.IsDecmpfsCompressed();
std::ignore = hfs_iterator.GetPath();
if (hfs_iterator.IsDirectory() || hfs_iterator.IsHardLink())
continue;
// Read out file contents.
std::unique_ptr<safe_browsing::dmg::ReadStream> file(
hfs_iterator.GetReadStream());
size_t read_this_pass = 0;
do {
if (!file->Read(buffer, &read_this_pass)) {
break;
}
} while (read_this_pass != 0);
}
return 0;
}
|
