Coverage Report

Created: 2025-12-22 06:51

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/mruby/oss-fuzz/mruby_proto_fuzzer.cpp
Line
Count
Source
1
#include <string>
2
#include <iostream>
3
#include <fstream>
4
5
#include <mruby.h>
6
#include <mruby/compile.h>
7
8
#include <src/libfuzzer/libfuzzer_macro.h>
9
#include <ruby.pb.h>
10
#include "proto_to_ruby.h"
11
12
using namespace ruby_fuzzer;
13
using namespace std;
14
15
916
int FuzzRB(const uint8_t *Data, size_t size) {
16
916
  mrb_value v;
17
916
  mrb_state *mrb = mrb_open();
18
916
  if (!mrb)
19
0
    return 0;
20
21
916
  char *code = (char*)malloc(size+1);
22
916
  if (!code)
23
0
    return 0;
24
916
  memcpy(code, Data, size);
25
916
  code[size] = '\0';
26
27
916
  if (const char *dump_path = getenv("PROTO_FUZZER_DUMP_PATH")) {
28
    // With libFuzzer binary run this to generate an RB file x.rb:
29
    // PROTO_FUZZER_DUMP_PATH=x.rb ./a.out proto-input
30
0
    std::ofstream of(dump_path);
31
0
    of.write(code, size);
32
0
  }
33
916
  std::cout << "\n\n############\n" << code << "\n############\n\n";
34
916
  v = mrb_load_string(mrb, code);
35
916
  mrb_close(mrb);
36
37
916
  free(code);
38
916
  return 0;
39
916
}
40
41
916
DEFINE_PROTO_FUZZER(const Function &function) {
42
916
  protoConverter converter;
43
916
  auto s = converter.FunctionToString(function);
44
916
  (void)FuzzRB((const uint8_t*)s.data(), s.size());
45
916
}