/src/parse_query_fuzzer.cc
Line | Count | Source |
1 | | // Copyright 2020 Google LLC |
2 | | // |
3 | | // Licensed under the Apache License, Version 2.0 (the "License"); |
4 | | // you may not use this file except in compliance with the License. |
5 | | // You may obtain a copy of the License at |
6 | | // |
7 | | // http://www.apache.org/licenses/LICENSE-2.0 |
8 | | // |
9 | | // Unless required by applicable law or agreed to in writing, software |
10 | | // distributed under the License is distributed on an "AS IS" BASIS, |
11 | | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
12 | | // See the License for the specific language governing permissions and |
13 | | // limitations under the License. |
14 | | |
15 | | #include <stddef.h> |
16 | | #include <stdint.h> |
17 | | #include <stdlib.h> |
18 | | #include <string> |
19 | | |
20 | | #include "libevent/include/event2/http.h" |
21 | | #include "libevent/include/event2/keyvalq_struct.h" |
22 | | |
23 | 1.15k | extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { |
24 | 1.15k | std::string fuzz_string(reinterpret_cast<const char *>(data), size); |
25 | 1.15k | struct evkeyvalq headers; |
26 | 1.15k | if (evhttp_parse_query(fuzz_string.c_str(), &headers) == 0) { |
27 | 457 | evhttp_clear_headers(&headers); |
28 | 457 | } |
29 | | |
30 | 1.15k | if (size > 4) { |
31 | 903 | uint32_t flags = *(uint32_t *)data; |
32 | 903 | data += 4; |
33 | 903 | size -= 4; |
34 | 903 | std::string fuzz_string2(reinterpret_cast<const char *>(data), size); |
35 | | |
36 | 903 | if (evhttp_parse_query_str_flags(fuzz_string2.c_str(), &headers, flags) == 0) { |
37 | 851 | evhttp_clear_headers(&headers); |
38 | 851 | } |
39 | 903 | } |
40 | | |
41 | 1.15k | return 0; |
42 | 1.15k | } |