/src/krb5/src/tests/fuzzing/fuzz_json.c
Line | Count | Source |
1 | | /* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */ |
2 | | /* tests/fuzzing/fuzz_json.c */ |
3 | | /* |
4 | | * Copyright (C) 2024 by Arjun. All rights reserved. |
5 | | * |
6 | | * Redistribution and use in source and binary forms, with or without |
7 | | * modification, are permitted provided that the following conditions |
8 | | * are met: |
9 | | * |
10 | | * * Redistributions of source code must retain the above copyright |
11 | | * notice, this list of conditions and the following disclaimer. |
12 | | * |
13 | | * * Redistributions in binary form must reproduce the above copyright |
14 | | * notice, this list of conditions and the following disclaimer in |
15 | | * the documentation and/or other materials provided with the |
16 | | * distribution. |
17 | | * |
18 | | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
19 | | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
20 | | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS |
21 | | * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE |
22 | | * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, |
23 | | * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES |
24 | | * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR |
25 | | * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
26 | | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, |
27 | | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
28 | | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED |
29 | | * OF THE POSSIBILITY OF SUCH DAMAGE. |
30 | | */ |
31 | | |
32 | | /* |
33 | | * Fuzzing harness implementation for k5_json_decode. |
34 | | */ |
35 | | |
36 | | #include "autoconf.h" |
37 | | #include <k5-int.h> |
38 | | #include <krb5.h> |
39 | | #include <k5-json.h> |
40 | | #include <string.h> |
41 | | |
42 | 3.64k | #define kMinInputLength 2 |
43 | 1.82k | #define kMaxInputLength 1024 |
44 | | |
45 | | extern int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size); |
46 | | |
47 | | int |
48 | | LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) |
49 | 1.82k | { |
50 | 1.82k | krb5_error_code ret; |
51 | 1.82k | k5_json_value decoded = NULL; |
52 | 1.82k | char *data_in = NULL, *data_out; |
53 | | |
54 | 1.82k | if (size < kMinInputLength || size > kMaxInputLength) |
55 | 24 | return 0; |
56 | | |
57 | 1.80k | data_in = k5memdup0(data, size, &ret); |
58 | 1.80k | if (data_in == NULL) |
59 | 0 | return 0; |
60 | | |
61 | 1.80k | ret = k5_json_decode(data_in, &decoded); |
62 | 1.80k | if (ret) |
63 | 1.09k | goto cleanup; |
64 | | |
65 | 708 | ret = k5_json_encode(decoded, &data_out); |
66 | 708 | if (!ret) |
67 | 422 | free(data_out); |
68 | | |
69 | 1.80k | cleanup: |
70 | 1.80k | free(data_in); |
71 | 1.80k | k5_json_release(decoded); |
72 | | |
73 | 1.80k | return 0; |
74 | 708 | } |