Coverage Report

Created: 2025-12-10 06:39

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ndpi/fuzz/fuzz_ds_hash.cpp
Line
Count
Source
1
#include "ndpi_api.h"
2
#include "fuzz_common_code.h"
3
4
#include <stdint.h>
5
#include <stdio.h>
6
#include <assert.h>
7
#include "fuzzer/FuzzedDataProvider.h"
8
9
528
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
10
528
  FuzzedDataProvider fuzzed_data(data, size);
11
528
  u_int16_t i, rc, num_iteration, data_len, is_added = 0;
12
528
  u_int64_t value64;
13
528
  std::vector<char>value_added;
14
528
  ndpi_str_hash *h = NULL;
15
16
  /* Just to have some data */
17
528
  if (fuzzed_data.remaining_bytes() < 1024)
18
18
    return -1;
19
20
  /* To allow memory allocation failures */
21
510
  fuzz_set_alloc_callbacks_and_seed(size);
22
23
510
  if (fuzzed_data.ConsumeBool())
24
448
    ndpi_hash_init(&h);
25
62
  else
26
62
    ndpi_hash_init(NULL);
27
28
510
  num_iteration = fuzzed_data.ConsumeIntegral<u_int8_t>();
29
74.6k
  for (i = 0; i < num_iteration; i++) {
30
31
74.1k
    data_len = fuzzed_data.ConsumeIntegralInRange(0, 127);
32
74.1k
    std::vector<char>data = fuzzed_data.ConsumeBytes<char>(data_len);
33
34
74.1k
    rc = ndpi_hash_add_entry(&h, data.data(), data.size(), i);
35
    /* Keep one random entry really added */
36
74.1k
    if (rc == 0 && fuzzed_data.ConsumeBool()) {
37
19.4k
      value_added = data;
38
19.4k
      is_added = 1;
39
19.4k
    }
40
74.1k
  }
41
42
  /* "Random" search */
43
510
  num_iteration = fuzzed_data.ConsumeIntegral<u_int8_t>();
44
35.4k
  for (i = 0; i < num_iteration; i++) {
45
34.8k
    data_len = fuzzed_data.ConsumeIntegralInRange(0, 127);
46
34.8k
    std::vector<char>data = fuzzed_data.ConsumeBytes<char>(data_len);
47
48
34.8k
    ndpi_hash_find_entry(h, data.data(), data.size(), &value64);
49
34.8k
  }
50
  /* Search of an added entry */
51
510
  if (is_added) {
52
391
    ndpi_hash_find_entry(h, value_added.data(), value_added.size(), &value64);
53
391
  }
54
55
510
  if (fuzzed_data.ConsumeBool())
56
98
    ndpi_hash_free(NULL);
57
58
510
  ndpi_hash_free(&h);
59
60
510
  return 0;
61
528
}