1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
// See https://llvm.org/LICENSE.txt for license information.
// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
// Find "FUZZME", the target has 3 different functions.
//
// This test, and the accompanying lit tests
// (dataflow.test, only-some-bytes.test) assume that the compiler
// instruments functions in their lexical order.
// This assumption is not guaranteed, but it is likely to hold.
// It allows to simplify the test quite a bit: in the lit tests
// LLVMFuzzerTestOneInput is "F0", Func1 is "F1", Func2 is "F2".
#include <assert.h>
#include <cstddef>
#include <cstdint>
#include <cstdlib>
#include <cstdio>
extern "C" bool Func1(const uint8_t *Data, size_t Size);
extern "C" bool Func2(const uint8_t *Data, size_t Size);
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
if (Size >= 5
&& Data[0] == 'F'
&& Data[1] == 'U'
&& Data[2] == 'Z'
&& Data[3] == 'Z'
&& Func1(Data, Size)
&& Func2(Data, Size)) {
fprintf(stderr, "BINGO\n");
abort();
}
return 0;
}
extern "C"
__attribute__((noinline))
bool Func1(const uint8_t *Data, size_t Size) {
// assumes Size >= 5, doesn't check it.
return Data[4] == 'M';
}
extern "C"
__attribute__((noinline))
bool Func2(const uint8_t *Data, size_t Size) {
return Size >= 6 && Data[5] == 'E';
}
|
