1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
// Copyright 2021 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifdef UNSAFE_BUFFERS_BUILD
// TODO(crbug.com/40285824): Remove this and convert code to safer constructs.
#pragma allow_unsafe_buffers
#endif
#include <stddef.h>
#include <stdint.h>
#include "chromeos/ash/components/system/name_value_pairs_parser.h"
namespace ash::system {
// We need a class that can be friend of NameValuePairsParser because we fuzz
// input to private methods that underpin the public methods.
class NameValuePairsParserFuzzer {
public:
void testOneInput(const uint8_t* data, size_t size) {
const std::string input = std::string(data, data + size);
name_value_map_.clear();
testInputAsVpdDumpLine(input);
testInputAsCrossystemOutputLine(input);
testInputAsVpdDumpValuesForKey(input);
}
private:
void testInputAsVpdDumpLine(const std::string& input) {
NameValuePairsParser parser(&name_value_map_);
parser.ParseNameValuePairs(input, NameValuePairsFormat::kVpdDump);
}
void testInputAsCrossystemOutputLine(const std::string& input) {
NameValuePairsParser parser(&name_value_map_);
parser.ParseNameValuePairs(input, NameValuePairsFormat::kCrossystem);
}
void testInputAsVpdDumpValuesForKey(const std::string& input) {
// Test with the input as is as a value (which may be malformed due to
// the presence of newlines in it).
testInputAsVpdDumpValueForKey(input);
// Test with the input as a value on the same line (i.e., without any
// newline in it).
std::string value = input;
std::erase(value, '\n');
testInputAsVpdDumpValueForKey(value);
// TODO(crbug.com/40197992): Check that the value for "key" is |value|.
}
void testInputAsVpdDumpValueForKey(const std::string& input) {
name_value_map_.erase("key");
testInputAsVpdDumpLine(std::string("\"key\"=\"") + input + "\"\n");
}
NameValuePairsParser::NameValueMap name_value_map_;
};
} // namespace ash::system
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
ash::system::NameValuePairsParserFuzzer fuzzer;
fuzzer.testOneInput(data, size);
return 0;
}
|
