Coverage Report

Created: 2025-11-16 07:15

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/keystone/suite/fuzz/fuzz_asm_arm64_arm.c
Line
Count
Source
1
#include <keystone/keystone.h>
2
3
#include <string.h>
4
5
FILE * outfile = NULL;
6
7
8
117k
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
9
117k
    ks_engine *ks;
10
117k
    ks_err err;
11
117k
    size_t count;
12
117k
    unsigned char *encode = NULL;
13
117k
    size_t size;
14
117k
    char * assembler;
15
16
117k
    if (outfile == NULL) {
17
        // we compute the output
18
25
        outfile = fopen("/dev/null", "w");
19
25
        if (outfile == NULL) {
20
0
            printf("failed opening /dev/null\n");
21
0
            abort();
22
0
        }
23
25
    }
24
25
117k
    if (Size < 1) {
26
0
        return 0;
27
0
    }
28
29
117k
    err = ks_open(KS_ARCH_ARM64, KS_MODE_LITTLE_ENDIAN, &ks);
30
117k
    if (err != KS_ERR_OK) {
31
0
        printf("ERROR: failed on ks_open(), quit error = %u\n", err);
32
0
        abort();
33
0
    }
34
35
117k
    ks_option(ks, KS_OPT_SYNTAX, Data[Size-1]);
36
37
117k
    assembler = malloc(Size);
38
117k
    memcpy(assembler, Data, Size-1);
39
    //null terminate string
40
117k
    assembler[Size-1] = 0;
41
42
117k
    if (ks_asm(ks, assembler, 0, &encode, &size, &count) != KS_ERR_OK) {
43
70.8k
        fprintf(outfile, "ERROR: ks_asm() failed & count = %lu, error = %u\n",
44
70.8k
                count, ks_errno(ks));
45
70.8k
    } else {
46
46.2k
        size_t i;
47
48
46.2k
        fprintf(outfile, "%s = ", assembler);
49
1.36G
        for (i = 0; i < size; i++) {
50
1.36G
            fprintf(outfile, "%02x ", encode[i]);
51
1.36G
        }
52
46.2k
        fprintf(outfile, "\n");
53
46.2k
        fprintf(outfile, "Compiled: %lu bytes, statements: %lu\n", size, count);
54
46.2k
    }
55
56
117k
    free(assembler);
57
    // NOTE: free encode after usage to avoid leaking memory
58
117k
    if (encode != NULL) {
59
46.2k
        ks_free(encode);
60
46.2k
    }
61
62
    // close Keystone instance when done
63
117k
    ks_close(ks);
64
65
117k
    return 0;
66
117k
}