Coverage Report

Created: 2026-10-28 06:57

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/keystone/suite/fuzz/fuzz_asm_x86_16.c
Line
Count
Source
1
#include <keystone/keystone.h>
2
3
#include <string.h>
4
5
FILE * outfile = NULL;
6
7
8
178k
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
9
178k
    ks_engine *ks;
10
178k
    ks_err err;
11
178k
    size_t count;
12
178k
    unsigned char *encode = NULL;
13
178k
    size_t size;
14
178k
    char * assembler;
15
16
178k
    if (outfile == NULL) {
17
        // we compute the output
18
26
        outfile = fopen("/dev/null", "w");
19
26
        if (outfile == NULL) {
20
0
            printf("failed opening /dev/null\n");
21
0
            abort();
22
0
        }
23
26
    }
24
25
178k
    if (Size < 1) {
26
0
        return 0;
27
0
    }
28
29
178k
    err = ks_open(KS_ARCH_X86, KS_MODE_16, &ks);
30
178k
    if (err != KS_ERR_OK) {
31
0
        printf("ERROR: failed on ks_open(), quit error = %u\n", err);
32
0
        abort();
33
0
    }
34
35
178k
    ks_option(ks, KS_OPT_SYNTAX, Data[Size-1]);
36
37
178k
    assembler = malloc(Size);
38
178k
    memcpy(assembler, Data, Size-1);
39
    //null terminate string
40
178k
    assembler[Size-1] = 0;
41
42
178k
    if (ks_asm(ks, assembler, 0, &encode, &size, &count) != KS_ERR_OK) {
43
108k
        fprintf(outfile, "ERROR: ks_asm() failed & count = %lu, error = %u\n",
44
108k
                count, ks_errno(ks));
45
108k
    } else {
46
70.5k
        size_t i;
47
48
70.5k
        fprintf(outfile, "%s = ", assembler);
49
1.38G
        for (i = 0; i < size; i++) {
50
1.38G
            fprintf(outfile, "%02x ", encode[i]);
51
1.38G
        }
52
70.5k
        fprintf(outfile, "\n");
53
70.5k
        fprintf(outfile, "Compiled: %lu bytes, statements: %lu\n", size, count);
54
70.5k
    }
55
56
178k
    free(assembler);
57
    // NOTE: free encode after usage to avoid leaking memory
58
178k
    if (encode != NULL) {
59
70.5k
        ks_free(encode);
60
70.5k
    }
61
62
    // close Keystone instance when done
63
178k
    ks_close(ks);
64
65
178k
    return 0;
66
178k
}