Coverage Report

Created: 2026-02-21 07:19

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ndpi/fuzz/fuzz_alg_memmem.cpp
Line
Count
Source
1
#include "ndpi_api.h"
2
3
#include "fuzzer/FuzzedDataProvider.h"
4
5
215
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
6
215
  FuzzedDataProvider fuzzed_data(data, size);
7
215
  char dst[256];
8
215
  uint8_t *h;
9
215
  int h_len, needle_len = 0, needle_start = 0;
10
11
  /* No real memory allocations involved */
12
13
  /* 1: needle is a subset of haystack */
14
15
215
  std::vector<uint8_t>haystack = fuzzed_data.ConsumeBytes<uint8_t>(512);
16
215
  h = haystack.data();
17
215
  h_len = haystack.size();
18
19
215
  if(h_len > 1) {
20
214
    needle_start = fuzzed_data.ConsumeIntegralInRange(0, h_len - 1);
21
214
    needle_len = fuzzed_data.ConsumeIntegralInRange(0, h_len - needle_start - 1); 
22
214
  }
23
215
  ndpi_memmem(h, h_len, &h[needle_start], needle_len);
24
25
  /* 2: fully random */
26
27
215
  std::vector<uint8_t>needle = fuzzed_data.ConsumeBytes<uint8_t>(512);
28
215
  ndpi_memmem(h, h_len, needle.data(), needle.size());
29
30
31
  /* Let use this fuzzer to check also this simple function... */
32
215
  if(fuzzed_data.ConsumeBool())
33
72
    ndpi_strlcpy(dst, (const char *)h, sizeof(dst), h_len);
34
143
  else
35
143
    ndpi_strlcpy(NULL, (const char *)h, 0, h_len);
36
37
  /* Let use this fuzzer to check also this simple function... */
38
215
  ndpi_memcasecmp(fuzzed_data.ConsumeBool() ? h : NULL,
39
215
                  fuzzed_data.ConsumeBool() ? h : NULL,
40
215
                  fuzzed_data.ConsumeBool() ? h_len : 0);
41
42
215
  return 0;
43
215
}