1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
/*
* Copyright (c) 2017-2024 Free Software Foundation, Inc.
*
* This file is part of libwget.
*
* Libwget is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* Libwget is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with libwget. If not, see <https://www.gnu.org/licenses/>.
*/
#include <config.h>
#include <assert.h>
#include <stdio.h>
#include <stdint.h>
#include <stdlib.h>
#include <string.h>
#include "wget.h"
#include "fuzzer.h"
static void _cb(
WGET_GCC_UNUSED void *context,
WGET_GCC_UNUSED int flags,
WGET_GCC_UNUSED const char *tag,
WGET_GCC_UNUSED const char *attr,
WGET_GCC_UNUSED const char *val,
WGET_GCC_UNUSED size_t len,
WGET_GCC_UNUSED size_t pos)
{
}
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
if (size > 10000) // same as max_len = 10000 in .options file
return 0;
char *in = (char *) malloc(size + 1);
assert(in != NULL);
// 0 terminate
memcpy(in, data, size);
in[size] = 0;
wget_xml_parse_buffer(in, NULL, NULL, 0);
wget_xml_parse_buffer(in, _cb, NULL, XML_HINT_REMOVE_EMPTY_CONTENT);
wget_html_parse_buffer(in, _cb, NULL, 0);
wget_html_parse_buffer(in, _cb, NULL, XML_HINT_REMOVE_EMPTY_CONTENT);
free(in);
wget_html_parse_file("/dev/null", NULL, NULL, 0);
freopen("/dev/null", "r", stdin);
wget_html_parse_file("-", NULL, NULL, 0);
return 0;
}
|
