Coverage Report

Created: 2026-02-26 06:52

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/fuzz/ext2fs_image_read_write_fuzzer.cc
Line
Count
Source
1
// Copyright 2020 Google LLC
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
15
#include <stddef.h>
16
#include <stdint.h>
17
#include <unistd.h>
18
#include <assert.h>
19
#include <sys/syscall.h>
20
#include <linux/memfd.h>
21
#include <fuzzer/FuzzedDataProvider.h>
22
23
#include "ext2fs/ext2fs.h"
24
25
310
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
26
27
310
  enum FuzzerType {
28
310
    ext2fsImageBitmapRead,
29
310
    ext2fsImageInodeRead,
30
310
    ext2fsImageSuperRead,
31
310
    ext2fsImageBitmapWrite,
32
310
    ext2fsImageInodeWrite,
33
310
    ext2fsImageSuperWrite,
34
310
    kMaxValue = ext2fsImageSuperWrite
35
310
  };
36
37
310
  FuzzedDataProvider stream(data, size);
38
310
  const FuzzerType f = stream.ConsumeEnum<FuzzerType>();
39
310
  (void) stream.ConsumeIntegral<int>();
40
  // Keep this here to not spoil the corpus or reproducers
41
42
310
  static const char* fname = "ext2_test_file";
43
44
  // Write our data to a temp file.
45
310
  int fd = syscall(SYS_memfd_create, fname, 0);
46
310
  std::vector<char> buffer = stream.ConsumeRemainingBytes<char>();
47
310
  write(fd, buffer.data(), buffer.size());
48
49
310
  std::string fspath("/proc/self/fd/" + std::to_string(fd));
50
51
310
  ext2_filsys fs;
52
310
  errcode_t retval = ext2fs_open(
53
310
      fspath.c_str(),
54
310
      EXT2_FLAG_IGNORE_CSUM_ERRORS, 0, 0,
55
310
      unix_io_manager,
56
310
      &fs);
57
58
310
  if (!retval) {
59
262
    switch (f) {
60
61
      case ext2fsImageBitmapRead: {
61
61
        ext2fs_image_bitmap_read(fs, fd, 0);
62
61
        break;
63
0
      }
64
4
      case ext2fsImageInodeRead: {
65
4
        ext2fs_image_inode_read(fs, fd, 0);
66
4
        break;
67
0
      }
68
0
      case ext2fsImageSuperRead: {
69
0
        ext2fs_image_super_read(fs, fd, 0);
70
0
        break;
71
0
      }
72
102
      case ext2fsImageBitmapWrite: {
73
102
        ext2fs_image_bitmap_write(fs, fd, 0);
74
102
        break;
75
0
      }
76
88
      case ext2fsImageInodeWrite: {
77
88
        ext2fs_image_inode_write(fs, fd, 0);
78
88
        break;
79
0
      }
80
7
      case ext2fsImageSuperWrite: {
81
7
        ext2fs_image_super_write(fs, fd, 0);
82
7
        break;
83
0
      }
84
0
      default: {
85
0
        assert(false);
86
0
      }
87
262
    }
88
262
    ext2fs_close(fs);
89
262
  }
90
310
  close(fd);
91
92
310
  return 0;
93
310
}