Coverage Report

Created: 2026-09-07 06:44

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/fuzz/ext2fs_image_read_write_fuzzer.cc
Line
Count
Source
1
// Copyright 2020 Google LLC
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
15
#include <stddef.h>
16
#include <stdint.h>
17
#include <unistd.h>
18
#include <assert.h>
19
#include <sys/syscall.h>
20
#include <linux/memfd.h>
21
#include <fuzzer/FuzzedDataProvider.h>
22
23
#include "ext2fs/ext2fs.h"
24
25
434
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
26
27
434
  enum FuzzerType {
28
434
    ext2fsImageBitmapRead,
29
434
    ext2fsImageInodeRead,
30
434
    ext2fsImageSuperRead,
31
434
    ext2fsImageBitmapWrite,
32
434
    ext2fsImageInodeWrite,
33
434
    ext2fsImageSuperWrite,
34
434
    kMaxValue = ext2fsImageSuperWrite
35
434
  };
36
37
434
  FuzzedDataProvider stream(data, size);
38
434
  const FuzzerType f = stream.ConsumeEnum<FuzzerType>();
39
434
  (void) stream.ConsumeIntegral<int>();
40
  // Keep this here to not spoil the corpus or reproducers
41
42
434
  static const char* fname = "ext2_test_file";
43
44
  // Write our data to a temp file.
45
434
  int fd = syscall(SYS_memfd_create, fname, 0);
46
434
  std::vector<char> buffer = stream.ConsumeRemainingBytes<char>();
47
434
  write(fd, buffer.data(), buffer.size());
48
49
434
  std::string fspath("/proc/self/fd/" + std::to_string(fd));
50
51
434
  ext2_filsys fs;
52
434
  errcode_t retval = ext2fs_open(
53
434
      fspath.c_str(),
54
434
      EXT2_FLAG_IGNORE_CSUM_ERRORS, 0, 0,
55
434
      unix_io_manager,
56
434
      &fs);
57
58
434
  if (!retval) {
59
387
    switch (f) {
60
95
      case ext2fsImageBitmapRead: {
61
95
        ext2fs_image_bitmap_read(fs, fd, 0);
62
95
        break;
63
0
      }
64
6
      case ext2fsImageInodeRead: {
65
6
        ext2fs_image_inode_read(fs, fd, 0);
66
6
        break;
67
0
      }
68
0
      case ext2fsImageSuperRead: {
69
0
        ext2fs_image_super_read(fs, fd, 0);
70
0
        break;
71
0
      }
72
135
      case ext2fsImageBitmapWrite: {
73
135
        ext2fs_image_bitmap_write(fs, fd, 0);
74
135
        break;
75
0
      }
76
144
      case ext2fsImageInodeWrite: {
77
144
        ext2fs_image_inode_write(fs, fd, 0);
78
144
        break;
79
0
      }
80
7
      case ext2fsImageSuperWrite: {
81
7
        ext2fs_image_super_write(fs, fd, 0);
82
7
        break;
83
0
      }
84
0
      default: {
85
0
        assert(false);
86
0
      }
87
387
    }
88
387
    ext2fs_close(fs);
89
387
  }
90
434
  close(fd);
91
92
434
  return 0;
93
434
}