/* fuzzer_tool_flac

 * Copyright (C) 2023-2025  Xiph.Org Foundation

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 *

 * - Redistributions of source code must retain the above copyright

 * notice, this list of conditions and the following disclaimer.

 *

 * - Redistributions in binary form must reproduce the above copyright

 * notice, this list of conditions and the following disclaimer in the

 * documentation and/or other materials provided with the distribution.

 *

 * - Neither the name of the Xiph.org Foundation nor the names of its

 * contributors may be used to endorse or promote products derived from

 * this software without specific prior written permission.

 *

 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS

 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT

 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR

 * A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR

 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,

 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,

 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR

 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF

 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING

 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS

 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

 */

#include <stdio.h>

#include <stdlib.h>

#include <string.h> /* for memcpy */

#define FUZZ_TOOL_METAFLAC

#define fprintf(...)

#define printf(...)

#include "../src/metaflac/main.c"

#include "common.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size);

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)

{

  size_t size_left = size;

  size_t arglen;

  char * argv[64];

  char exename[] = "metaflac";

  char filename[] = "/tmp/fuzzXXXXXX";

  char filename_stdin[] = "/tmp/fuzzXXXXXX";

  int numarg = 0, maxarg;

  int file_to_fuzz;

  int tmp_stdout, tmp_stdin;

  fpos_t pos_stdout;

  bool use_stdin = false;

  share__opterr = 0;

  share__optind = 0;

  allowed_filename = NULL;

  if(size < 2)

    return 0;

  maxarg = data[0] & 15;

  use_stdin = data[0] & 16;

  size_left--;

  argv[0] = exename;

  numarg++;

  /* Check whether input is zero delimited */

  while((arglen = strnlen((char *)data+(size-size_left),size_left)) < size_left && numarg < maxarg) {

    argv[numarg++] = (char *)data+(size-size_left);

    size_left -= arglen + 1;

  }

  /* Create file to feed directly */

  file_to_fuzz = mkstemp(filename);

  if (file_to_fuzz < 0)

    abort();

  if(use_stdin) {

    write(file_to_fuzz,data+(size-size_left),size_left/2);

    size_left -= size_left/2;

  }

  else

    write(file_to_fuzz,data+(size-size_left),size_left);

  close(file_to_fuzz);

  argv[numarg++] = filename;

  allowed_filename = filename;

  /* Create file to feed to stdin */

  if(use_stdin) {

    file_to_fuzz = mkstemp(filename_stdin);

    if (file_to_fuzz < 0)

      abort();

    write(file_to_fuzz,data+(size-size_left),size_left);

    close(file_to_fuzz);

  }

  /* redirect stdout */

  fflush(stdout);

  fgetpos(stdout,&pos_stdout);

  tmp_stdout = dup(fileno(stdout));

  freopen("/dev/null","w",stdout);

  /* redirect stdin */

  tmp_stdin = dup(fileno(stdin));

  if(use_stdin)

    freopen(filename_stdin,"r",stdin);

  else {

    freopen("/dev/null","r",stdin);

    argv[numarg++] = filename;

  }

  main_to_fuzz(numarg,argv);

  /* restore stdout */

  fflush(stdout);

  dup2(tmp_stdout, fileno(stdout));

  close(tmp_stdout);

  clearerr(stdout);

  fsetpos(stdout,&pos_stdout);

  /* restore stdin */

  dup2(tmp_stdin, fileno(stdin));

  close(tmp_stdin);

  clearerr(stdin);

  unlink(filename);

  if(use_stdin)

    unlink(filename_stdin);

  return 0;

}