File: FuzzingBufferReader.h

package info (click to toggle)
firefox 149.0-1
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 4,767,760 kB
  • sloc: cpp: 7,416,064; javascript: 6,752,859; ansic: 3,774,850; python: 1,250,473; xml: 641,578; asm: 439,191; java: 186,617; sh: 56,634; makefile: 18,856; objc: 13,092; perl: 12,763; pascal: 5,960; yacc: 4,583; cs: 3,846; lex: 1,720; ruby: 1,002; php: 436; lisp: 258; awk: 105; sql: 66; sed: 53; csh: 10; exp: 6
file content (76 lines) | stat: -rw-r--r-- 2,182 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_
#define TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_

#include "mozilla/Assertions.h"
#include "mozilla/Result.h"
#include "mozilla/ResultVariant.h"

namespace mozilla {

enum TestFuncRetValue : int { RET_SUCCESS = 0 };

// Allow TestFuncRetValue errors to automatically convert to bool values, so
// MOZ_TRY can be used in int returning methods with Result<T, TestFuncRetValue>
// results.
template <>
class [[nodiscard]] GenericErrorResult<TestFuncRetValue> {
  TestFuncRetValue mErrorValue;

  template <typename V, typename E2>
  friend class Result;

 public:
  explicit GenericErrorResult(TestFuncRetValue aErrorValue)
      : mErrorValue(aErrorValue) {}

  GenericErrorResult(TestFuncRetValue aErrorValue, const ErrorPropagationTag&)
      : GenericErrorResult(aErrorValue) {}

  MOZ_IMPLICIT operator int() const { return mErrorValue; }
};

// This allows using MOZ_TRY to unpack data from the libFuzzer test buffer.
//
//  static int testCallback(const uint8_t* buf, size_t size) {
//    FuzzingBufferReader fuzzBuf(buf, size);
//
//    int32_t data = MOZ_TRY(fuzzBuf.Read<int32_t>());
//    ...
//  }
//
// If the remaining buffer data is less than requested, MOZ_TRY returns 0 to
// end the iteration.
class FuzzingBufferReader {
 public:
  FuzzingBufferReader(const uint8_t* buf, size_t size)
      : mPos(buf), mEnd(buf + size) {
    MOZ_RELEASE_ASSERT(mPos <= mEnd);
  }

  size_t Length() { return mEnd - mPos; }

  const uint8_t* Pos() { return mPos; }

  template <typename T>
  Result<T, TestFuncRetValue> Read() {
    if (Length() < sizeof(T)) {
      return Err(RET_SUCCESS);
    }
    T result = *reinterpret_cast<const T*>(mPos);
    mPos += sizeof(T);
    return result;
  }

 private:
  const uint8_t* mPos;
  const uint8_t* const mEnd;
};

}  // namespace mozilla

#endif  // TOOLS_FUZZING_COMMON_FUZZINGBUFFERREADER_H_