Coverage Report

Created: 2025-12-27 06:12

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/keystone/suite/fuzz/fuzz_asm_hex.c
Line
Count
Source
1
#include <keystone/keystone.h>
2
3
#include <string.h>
4
5
FILE * outfile = NULL;
6
7
8
128k
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
9
128k
    ks_engine *ks;
10
128k
    ks_err err;
11
128k
    size_t count;
12
128k
    unsigned char *encode = NULL;
13
128k
    size_t size;
14
128k
    char * assembler;
15
16
128k
    if (outfile == NULL) {
17
        // we compute the output
18
26
        outfile = fopen("/dev/null", "w");
19
26
        if (outfile == NULL) {
20
0
            printf("failed opening /dev/null\n");
21
0
            abort();
22
0
        }
23
26
    }
24
25
128k
    if (Size < 1) {
26
0
        return 0;
27
0
    }
28
29
128k
    err = ks_open(KS_ARCH_HEXAGON, KS_MODE_BIG_ENDIAN, &ks);
30
128k
    if (err != KS_ERR_OK) {
31
0
        printf("ERROR: failed on ks_open(), quit error = %u\n", err);
32
0
        abort();
33
0
    }
34
35
128k
    ks_option(ks, KS_OPT_SYNTAX, Data[Size-1]);
36
37
128k
    assembler = malloc(Size);
38
128k
    memcpy(assembler, Data, Size-1);
39
    //null terminate string
40
128k
    assembler[Size-1] = 0;
41
42
128k
    if (ks_asm(ks, assembler, 0, &encode, &size, &count) != KS_ERR_OK) {
43
77.9k
        fprintf(outfile, "ERROR: ks_asm() failed & count = %lu, error = %u\n",
44
77.9k
                count, ks_errno(ks));
45
77.9k
    } else {
46
50.0k
        size_t i;
47
48
50.0k
        fprintf(outfile, "%s = ", assembler);
49
1.48G
        for (i = 0; i < size; i++) {
50
1.48G
            fprintf(outfile, "%02x ", encode[i]);
51
1.48G
        }
52
50.0k
        fprintf(outfile, "\n");
53
50.0k
        fprintf(outfile, "Compiled: %lu bytes, statements: %lu\n", size, count);
54
50.0k
    }
55
56
128k
    free(assembler);
57
    // NOTE: free encode after usage to avoid leaking memory
58
128k
    if (encode != NULL) {
59
50.0k
        ks_free(encode);
60
50.0k
    }
61
62
    // close Keystone instance when done
63
128k
    ks_close(ks);
64
65
128k
    return 0;
66
128k
}