/src/cups/ossfuzz/fuzz_array.c
Line  | Count  | Source  | 
1  |  | //  | 
2  |  | // Array fuzz program for CUPS.  | 
3  |  | //  | 
4  |  | // Copyright © 2020-2024 by OpenPrinting.  | 
5  |  | // Copyright © 2007-2014 by Apple Inc.  | 
6  |  | // Copyright © 1997-2006 by Easy Software Products.  | 
7  |  | //  | 
8  |  | // Licensed under Apache License v2.0.  See the file "LICENSE" for more  | 
9  |  | // information.  | 
10  |  | //  | 
11  |  |  | 
12  |  | #include "string-private.h"  | 
13  |  | #include "debug-private.h"  | 
14  |  | #include "cups.h"  | 
15  |  | #include "dir.h"  | 
16  |  | #include "test-internal.h"  | 
17  |  |  | 
18  |  | //  | 
19  |  | // Local functions...  | 
20  |  | //  | 
21  |  |  | 
22  |  | // static double  get_seconds(void);  | 
23  |  | // static int load_words(const char *filename, cups_array_t *array);  | 
24  |  |  | 
25  |  | typedef struct { | 
26  |  |     char* str1;  | 
27  |  |     char* str2;  | 
28  |  | } FuzzArray;  | 
29  |  |  | 
30  |  | extern void generate_fuzz_array_data(const unsigned char *data, size_t size, FuzzArray *outData);  | 
31  |  | extern void free_fuzz_array_data(FuzzArray *data);  | 
32  |  |  | 
33  |  | // fuzz entry point  | 
34  | 117  | int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { | 
35  | 117  |   int   i;      // Looping var  | 
36  | 117  |   cups_array_t  *array,     // Test array  | 
37  | 117  |     *dup_array;   // Duplicate array  | 
38  | 117  |   int   status;     // Exit status  | 
39  | 117  |   char    *text;      // Text from array  | 
40  |  |   // int string_size;  | 
41  | 117  |   char    *saved[32];   // Saved entries  | 
42  |  |  | 
43  |  |   // No errors so far...  | 
44  | 117  |   status = 0;  | 
45  |  |  | 
46  | 117  |   if (Size < 4) { | 
47  | 2  |     return 0;   | 
48  | 2  |   }  | 
49  |  |  | 
50  | 115  |   FuzzArray fuzzInput;  | 
51  | 115  |   generate_fuzz_array_data(Data, Size, &fuzzInput);  | 
52  | 115  |   char* first_string = fuzzInput.str1;  | 
53  | 115  |   char* second_string = fuzzInput.str2;  | 
54  |  |  | 
55  |  |   // cupsArrayNew()  | 
56  | 115  |   array = cupsArrayNew3((cups_array_func_t)_cupsArrayStrcmp, (void *)first_string, NULL, 0, (cups_acopy_cb_t)_cupsArrayStrdup, (cups_afree_cb_t)_cupsArrayFree);  | 
57  |  |  | 
58  | 115  |   if (!array)  | 
59  | 0  |   { | 
60  | 0  |     printf("returned NULL, expected pointer"); | 
61  | 0  |     abort();  | 
62  | 0  |   }  | 
63  |  |  | 
64  |  |   // cupsArrayGetUserData()  | 
65  | 115  |   if (cupsArrayGetUserData(array) != first_string)  | 
66  | 0  |   { | 
67  | 0  |     printf("returned %p instead of %p", cupsArrayGetUserData(array), first_string); | 
68  | 0  |     abort();  | 
69  | 0  |   }  | 
70  |  |  | 
71  |  |   // cupsArrayAdd()  | 
72  | 115  |   if (!cupsArrayAdd(array, second_string))  | 
73  | 0  |   { | 
74  | 0  |     printf("Add String Error"); | 
75  | 0  |     abort();  | 
76  | 0  |   }  | 
77  |  |  | 
78  |  |   // cupsArrayGetCount()  | 
79  | 115  |   cupsArrayGetCount(array);  | 
80  |  |  | 
81  |  |   // cupsArrayGetFirst()  | 
82  | 115  |   text = (char *)cupsArrayGetFirst(array);  | 
83  | 115  |   if (text == NULL)  | 
84  | 0  |   { | 
85  | 0  |     printf("Error Reading"); | 
86  | 0  |   }  | 
87  |  |  | 
88  |  |   // cupsArrayGetNext()  | 
89  | 115  |   text = (char *)cupsArrayGetNext(array);  | 
90  | 115  |   if (text == NULL)  | 
91  | 115  |   { | 
92  | 115  |     printf("Error Reading"); | 
93  | 115  |   }  | 
94  |  |  | 
95  |  |   // cupsArrayGetLast()  | 
96  | 115  |   text = (char *)cupsArrayGetLast(array);  | 
97  | 115  |   if (text == NULL)  | 
98  | 0  |   { | 
99  | 0  |     printf("Error Reading"); | 
100  | 0  |   }  | 
101  |  |  | 
102  |  |   // cupsArrayGetPrev()  | 
103  | 115  |   text = (char *)cupsArrayGetPrev(array);  | 
104  | 115  |   if (text == NULL)  | 
105  | 115  |   { | 
106  | 115  |     printf("Error Reading"); | 
107  | 115  |   }  | 
108  |  |  | 
109  |  |   // cupsArrayFind()  | 
110  | 115  |   text = (char *)cupsArrayFind(array, second_string);  | 
111  | 115  |   if (text == NULL)  | 
112  | 0  |   { | 
113  | 0  |     printf("Error Finding"); | 
114  | 0  |   }  | 
115  |  |  | 
116  |  |   // cupsArrayGetCurrent()  | 
117  | 115  |   text = (char *)cupsArrayGetCurrent(array);  | 
118  | 115  |   if (text == NULL)  | 
119  | 0  |   { | 
120  | 0  |     printf("Error Finding"); | 
121  | 0  |   }  | 
122  |  |  | 
123  |  |   // cupsArrayDup()  | 
124  | 115  |   dup_array = cupsArrayDup(array);  | 
125  |  |  | 
126  |  |   // cupsArrayRemove()  | 
127  | 115  |   if (!cupsArrayRemove(array, first_string))  | 
128  | 80  |   { | 
129  | 80  |     printf("Error Finding"); | 
130  | 80  |   }  | 
131  |  |  | 
132  |  |   // cupsArrayClear()  | 
133  | 115  |   cupsArrayClear(array);  | 
134  | 115  |   if (cupsArrayGetCount(array) != 0)  | 
135  | 0  |     { | 
136  | 0  |         printf("Error Clearing"); | 
137  | 0  |   }  | 
138  |  |  | 
139  |  |   // Test save/restore...  | 
140  | 3.79k  |   for (i = 0, text = (char *)cupsArrayGetFirst(array); i < 32; i ++, text = (char *)cupsArrayGetNext(array))  | 
141  | 3.68k  |   { | 
142  | 3.68k  |     saved[i] = text;  | 
143  |  |  | 
144  | 3.68k  |     if (!cupsArraySave(array))  | 
145  | 0  |       break;  | 
146  | 3.68k  |   }  | 
147  |  |  | 
148  | 3.79k  |   while (i > 0)  | 
149  | 3.68k  |   { | 
150  | 3.68k  |     i --;  | 
151  |  |  | 
152  | 3.68k  |     text = cupsArrayRestore(array);  | 
153  | 3.68k  |     if (text != saved[i])  | 
154  | 0  |       break;  | 
155  | 3.68k  |   }  | 
156  |  |  | 
157  |  |   // Delete the arrays...  | 
158  | 115  |   cupsArrayDelete(array);  | 
159  | 115  |   cupsArrayDelete(dup_array);  | 
160  |  |  | 
161  | 115  |   free(first_string);  | 
162  | 115  |   free(second_string);  | 
163  |  |  | 
164  | 115  |   if (status != 0) { | 
165  | 0  |     abort();  | 
166  | 0  |   }  | 
167  |  |  | 
168  | 115  |   return 0;  | 
169  | 115  | }  |