File: search_by_pattern_fuzzer.cc

package info (click to toggle)
chromium 138.0.7204.183-1~deb12u1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm-proposed-updates
  • size: 6,080,960 kB
  • sloc: cpp: 34,937,079; ansic: 7,176,967; javascript: 4,110,704; python: 1,419,954; asm: 946,768; xml: 739,971; pascal: 187,324; sh: 89,623; perl: 88,663; objc: 79,944; sql: 50,304; cs: 41,786; fortran: 24,137; makefile: 21,811; php: 13,980; tcl: 13,166; yacc: 8,925; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (62 lines) | stat: -rw-r--r-- 2,198 bytes parent folder | download | duplicates (7)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <stddef.h>
#include <stdint.h>

#include <string>
#include <vector>

#include "base/files/scoped_temp_dir.h"
#include "base/logging.h"
#include "base/time/time.h"
#include "chrome/browser/ash/extensions/file_manager/search_by_pattern.h"
#include "chrome/browser/ash/fileapi/recent_source.h"

/**
 * Helper function that creates a file without content (we only care about
 * names). Returns true if successful, false otherwise.
 */
bool CreateTestFile(const base::FilePath& file_path) {
  auto path = base::FilePath(file_path);
  base::File file(path,
                  base::File::FLAG_CREATE_ALWAYS | base::File::FLAG_WRITE);
  return file.created();
}

/**
 * Checks the resiliance of SearchByPattern to fuzzed queries.
 */
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  base::ScopedTempDir temp_dir;
  if (!temp_dir.CreateUniqueTempDir()) {
    // Not a fuzzer error, so we return 0.
    return 0;
  }

  // Create files in the temp_dir, as otherwise SearchByPattern will never use
  // the query (it only uses it when matching against files it found).
  base::FilePath test_dir = temp_dir.GetPath();
  std::vector<std::string> file_names = {"foo.txt", "bar.exe"};
  for (const auto& name : file_names) {
    base::FilePath file_path = test_dir.Append(name);
    if (!CreateTestFile(file_path)) {
      LOG(ERROR) << "Failed to create file \"" << file_path.MaybeAsASCII()
                 << "\"";
      // Not a fuzzer error, so we return 0.
      return 0;
    }
  }

  base::Time min_modified_time = base::Time::UnixEpoch();
  std::string query = std::string(reinterpret_cast<const char*>(data), size);

  // Searching by fuzzed query. Using most broad parameters, excluding no paths,
  // accepting files of any time with modified date after 1 Jan 1970.
  std::vector<base::FilePath> excluded_path;
  extensions::SearchByPattern(test_dir, excluded_path, query, min_modified_time,
                              ash::RecentSource::FileType::kAll,
                              file_names.size());
  return 0;
}