Coverage Report

Created: 2026-10-28 07:20

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/fuzz_textfile.c
Line
Count
Source
1
/* Copyright 2022 Google LLC
2
Licensed under the Apache License, Version 2.0 (the "License");
3
you may not use this file except in compliance with the License.
4
You may obtain a copy of the License at
5
      http://www.apache.org/licenses/LICENSE-2.0
6
Unless required by applicable law or agreed to in writing, software
7
distributed under the License is distributed on an "AS IS" BASIS,
8
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
9
See the License for the specific language governing permissions and
10
limitations under the License.
11
*/
12
#include <config.h>
13
14
#include <stdint.h>
15
#include <stdio.h>
16
#include <string.h>
17
#include <stdlib.h>
18
#include <syslog.h>
19
#include <fcntl.h>
20
#include <unistd.h>
21
22
#include "src/textfile.h"
23
24
25
1.86k
char *get_null_terminated(const uint8_t **data, size_t *size) {
26
12.8k
#define STR_SIZE 75
27
1.86k
  if (*size < STR_SIZE || (int)*size < 0) {
28
46
    return NULL;
29
46
  }
30
31
1.82k
  char *new_s = malloc(STR_SIZE + 1);
32
1.82k
  memcpy(new_s, *data, STR_SIZE);
33
1.82k
  new_s[STR_SIZE] = '\0';
34
35
1.82k
  *data = *data+STR_SIZE;
36
1.82k
  *size -= STR_SIZE;
37
1.82k
  return new_s;
38
1.86k
}
39
40
623
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
41
623
  uint8_t *data_ptr = data;
42
623
  size_t size_val = size;
43
44
623
  char *key1 = get_null_terminated(&data_ptr, &size_val);
45
623
  char *val1 = get_null_terminated(&data_ptr, &size_val);
46
623
  char *key2 = get_null_terminated(&data_ptr, &size_val);
47
48
623
  if (!key1 || !val1 || !key2) {
49
18
    goto cleanup;
50
18
  }
51
  // Create a file with rest of content
52
605
  char filename[256];
53
605
  sprintf(filename, "/tmp/libfuzzer.%d", getpid());
54
605
  FILE *fp = fopen(filename, "wb");
55
605
  if (!fp) {
56
0
    return 0;
57
0
  }
58
605
  fwrite(data_ptr, size_val, 1, fp);
59
605
  fclose(fp);
60
61
605
  textfile_put(filename, key1, val1);
62
605
  textfile_get(filename, key2);
63
64
605
  unlink(filename);
65
66
623
cleanup:
67
68
623
  if (key1 != NULL) {
69
610
    free(key1);
70
610
    key1 = NULL;
71
610
  }
72
623
  if (val1 != NULL) {
73
608
    free(val1);
74
608
    val1 = NULL;
75
608
  }
76
623
  if (key2 != NULL) {
77
605
    free(key2);
78
605
    key2 = NULL;
79
605
  }
80
81
623
  return 0;
82
605
}