Coverage Report

Created: 2025-08-25 07:49

/src/keystone/suite/fuzz/fuzz_asm_systemz.c
Line
Count
Source (jump to first uncovered line)
1
#include <keystone/keystone.h>
2
3
#include <string.h>
4
5
FILE * outfile = NULL;
6
7
8
133k
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
9
133k
    ks_engine *ks;
10
133k
    ks_err err;
11
133k
    size_t count;
12
133k
    unsigned char *encode = NULL;
13
133k
    size_t size;
14
133k
    char * assembler;
15
16
133k
    if (outfile == NULL) {
17
        // we compute the output
18
25
        outfile = fopen("/dev/null", "w");
19
25
        if (outfile == NULL) {
20
0
            printf("failed opening /dev/null\n");
21
0
            abort();
22
0
        }
23
25
    }
24
25
133k
    if (Size < 1) {
26
0
        return 0;
27
0
    }
28
29
133k
    err = ks_open(KS_ARCH_SYSTEMZ, KS_MODE_BIG_ENDIAN, &ks);
30
133k
    if (err != KS_ERR_OK) {
31
0
        printf("ERROR: failed on ks_open(), quit error = %u\n", err);
32
0
        abort();
33
0
    }
34
35
133k
    ks_option(ks, KS_OPT_SYNTAX, Data[Size-1]);
36
37
133k
    assembler = malloc(Size);
38
133k
    memcpy(assembler, Data, Size-1);
39
    //null terminate string
40
133k
    assembler[Size-1] = 0;
41
42
133k
    if (ks_asm(ks, assembler, 0, &encode, &size, &count) != KS_ERR_OK) {
43
82.1k
        fprintf(outfile, "ERROR: ks_asm() failed & count = %lu, error = %u\n",
44
82.1k
                count, ks_errno(ks));
45
82.1k
    } else {
46
51.1k
        size_t i;
47
48
51.1k
        fprintf(outfile, "%s = ", assembler);
49
1.57G
        for (i = 0; i < size; i++) {
50
1.57G
            fprintf(outfile, "%02x ", encode[i]);
51
1.57G
        }
52
51.1k
        fprintf(outfile, "\n");
53
51.1k
        fprintf(outfile, "Compiled: %lu bytes, statements: %lu\n", size, count);
54
51.1k
    }
55
56
133k
    free(assembler);
57
    // NOTE: free encode after usage to avoid leaking memory
58
133k
    if (encode != NULL) {
59
51.1k
        ks_free(encode);
60
51.1k
    }
61
62
    // close Keystone instance when done
63
133k
    ks_close(ks);
64
65
133k
    return 0;
66
133k
}