File: libidn_stringprep_fuzzer.c

package info (click to toggle)
libidn 1.43-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 9,376 kB
  • sloc: java: 14,167; ansic: 7,085; cs: 1,974; sh: 1,283; perl: 1,238; makefile: 680; lisp: 231; php: 214; xml: 88; python: 9
file content (115 lines) | stat: -rw-r--r-- 2,981 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
/*
 * Copyright(c) 2017 Tim Ruehsen
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

#include <config.h>

#include <assert.h>		/* assert */
#include <stdint.h>		/* uint8_t, uint32_t */
#include <stdlib.h>		/* malloc, free */
#include <string.h>		/* memcpy */

#include "stringprep.h"
#include "pr29.h"
#include "tld.h"
#include "idn-free.h"
#include "fuzzer.h"

int
LLVMFuzzerTestOneInput (const uint8_t *data, size_t size)
{
  char *wdata;
  char *label;
  char *utf8_seq;
  char *out;
  uint32_t cp;
  size_t errpos;
  const Tld_table *tld;

  if (size > 2048)
    return 0;

  wdata = (char *) malloc (size + 1);
  label = (char *) malloc (size + 1);
  utf8_seq = (char *) malloc (6);
  assert (wdata != NULL);
  assert (label != NULL);
  assert (utf8_seq != NULL);

  /* 0 terminate */
  memcpy (label, data, size);
  label[size] = 0;

  stringprep_check_version (label);

  if (stringprep_profile
      (label, &out, "Nodeprep",
       (Stringprep_profile_flags) 0) == STRINGPREP_OK)
    idn_free (out);

  pr29_8z (label);		/* internally calls stringprep_utf8_to_ucs4() */

#ifdef WITH_TLD
  if (tld_get_z (label, &out) == TLD_SUCCESS)	/* internally calls tld_get_4() */
    idn_free (out);
  tld = tld_default_table ("fr", NULL);
  tld_check_8z (label, &errpos, NULL);
  tld_check_lz (label, &errpos, NULL);
#endif

  out = stringprep_utf8_nfkc_normalize ((char *) data, size);
  idn_free (out);

  cp = stringprep_utf8_to_unichar (label);
  stringprep_unichar_to_utf8 (cp, utf8_seq);

  memcpy (wdata, data, size);
  wdata[size] = 0;
  stringprep (wdata, size, (Stringprep_profile_flags) 0, stringprep_nameprep);
  memcpy (wdata, data, size);
  wdata[size] = 0;
  stringprep (wdata, size, STRINGPREP_NO_UNASSIGNED, stringprep_nameprep);

  if ((size & 3) == 0)
    {
      uint32_t *u32 = (uint32_t *) malloc (size + 4);

      assert (u32 != NULL);

      memcpy (u32, data, size);
      u32[size / 4] = 0;
      stringprep_4zi (u32, size / 4, (Stringprep_profile_flags) 0,
		      stringprep_xmpp_nodeprep);

      memcpy (u32, data, size);
      u32[size / 4] = 0;
#ifdef WITH_TLD
      if (tld_get_4z (u32, &out) == TLD_SUCCESS)	/* internally calls tld_get_4() */
	idn_free (out);

      tld_check_4tz (u32, &errpos, tld);
      tld_check_4z (u32, &errpos, NULL);
#endif

      free (u32);
    }

  free (utf8_seq);
  free (label);
  free (wdata);

  return 0;
}