Coverage Report

Created: 2026-02-26 07:10

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/net-snmp/testing/fuzzing/snmp_parse_args_fuzzer.c
Line
Count
Source
1
 /*
2
  * Copyright (c) 2025, Net-snmp authors
3
  * All rights reserved.
4
  *
5
  * Redistribution and use in source and binary forms, with or without
6
  * modification, are permitted provided that the following conditions are met:
7
  *
8
  * * Redistributions of source code must retain the above copyright notice, this
9
  *   list of conditions and the following disclaimer.
10
  *
11
  * * Redistributions in binary form must reproduce the above copyright notice,
12
  *   this list of conditions and the following disclaimer in the documentation
13
  *   and/or other materials provided with the distribution.
14
  *
15
  * * Neither the name of the copyright holder nor the names of its
16
  *   contributors may be used to endorse or promote products derived from
17
  *   this software without specific prior written permission.
18
  *
19
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
20
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
22
  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
23
  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24
  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
25
  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
26
  * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
27
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
28
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
29
  */
30
#include <net-snmp/net-snmp-config.h>
31
#include <net-snmp/net-snmp-includes.h>
32
#include <net-snmp/library/snmp_parse_args.h>
33
#include "ada_fuzz_header.h"
34
35
int
36
LLVMFuzzerTestOneInput(const uint8_t * data, size_t size)
37
4.64k
{
38
4.64k
    af_gb_init();
39
40
4.64k
    int argc = (af_get_short(&data, &size) % 99) + 1;
41
4.64k
    char **argv = malloc(argc * sizeof(*argv));
42
37.3k
    for (int i = 0; i < argc; i++) {
43
32.7k
        argv[i] = af_gb_get_null_terminated(&data, &size);
44
32.7k
        if (!argv[i])
45
30
            goto free_argv;
46
32.7k
    }
47
48
#if 0
49
    snmp_set_do_debugging(1);
50
    debug_register_tokens("snmp_parse_args");
51
#endif
52
53
4.61k
    netsnmp_session *ss = SNMP_MALLOC_TYPEDEF(netsnmp_session);
54
55
4.61k
    snmp_parse_args(argc, argv, ss, "", NULL);
56
57
4.61k
    snmp_close(ss);
58
4.61k
    netsnmp_cleanup_session(ss);
59
4.61k
    free(ss);
60
61
4.64k
free_argv:
62
4.64k
    free(argv);
63
64
4.64k
    af_gb_cleanup();
65
66
4.64k
    return 0;
67
4.61k
}