File: FuzzingBufferReader.h

package info (click to toggle)
firefox 147.0-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,683,324 kB
  • sloc: cpp: 7,607,156; javascript: 6,532,492; ansic: 3,775,158; python: 1,415,368; xml: 634,556; asm: 438,949; java: 186,241; sh: 62,751; makefile: 18,079; objc: 13,092; perl: 12,808; yacc: 4,583; cs: 3,846; pascal: 3,448; lex: 1,720; ruby: 1,003; php: 436; lisp: 258; awk: 247; sql: 66; sed: 54; csh: 10; exp: 6
file content (76 lines) | stat: -rw-r--r-- 2,182 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_
#define TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_

#include "mozilla/Assertions.h"
#include "mozilla/Result.h"
#include "mozilla/ResultVariant.h"

namespace mozilla {

enum TestFuncRetValue : int { RET_SUCCESS = 0 };

// Allow TestFuncRetValue errors to automatically convert to bool values, so
// MOZ_TRY can be used in int returning methods with Result<T, TestFuncRetValue>
// results.
template <>
class [[nodiscard]] GenericErrorResult<TestFuncRetValue> {
  TestFuncRetValue mErrorValue;

  template <typename V, typename E2>
  friend class Result;

 public:
  explicit GenericErrorResult(TestFuncRetValue aErrorValue)
      : mErrorValue(aErrorValue) {}

  GenericErrorResult(TestFuncRetValue aErrorValue, const ErrorPropagationTag&)
      : GenericErrorResult(aErrorValue) {}

  MOZ_IMPLICIT operator int() const { return mErrorValue; }
};

// This allows using MOZ_TRY to unpack data from the libFuzzer test buffer.
//
//  static int testCallback(const uint8_t* buf, size_t size) {
//    FuzzingBufferReader fuzzBuf(buf, size);
//
//    int32_t data = MOZ_TRY(fuzzBuf.Read<int32_t>());
//    ...
//  }
//
// If the remaining buffer data is less than requested, MOZ_TRY returns 0 to
// end the iteration.
class FuzzingBufferReader {
 public:
  FuzzingBufferReader(const uint8_t* buf, size_t size)
      : mPos(buf), mEnd(buf + size) {
    MOZ_RELEASE_ASSERT(mPos <= mEnd);
  }

  size_t Length() { return mEnd - mPos; }

  const uint8_t* Pos() { return mPos; }

  template <typename T>
  Result<T, TestFuncRetValue> Read() {
    if (Length() < sizeof(T)) {
      return Err(RET_SUCCESS);
    }
    T result = *reinterpret_cast<const T*>(mPos);
    mPos += sizeof(T);
    return result;
  }

 private:
  const uint8_t* mPos;
  const uint8_t* const mEnd;
};

}  // namespace mozilla

#endif  // TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_