/src/nghttp2/fuzz/fuzz_target.cc
Line | Count | Source |
1 | | #include <nghttp2/nghttp2.h> |
2 | | |
3 | | namespace { |
4 | | int on_frame_recv_callback(nghttp2_session *session, const nghttp2_frame *frame, |
5 | 17.1k | void *user_data) { |
6 | 17.1k | return 0; |
7 | 17.1k | } |
8 | | } // namespace |
9 | | |
10 | | namespace { |
11 | | int on_begin_headers_callback(nghttp2_session *session, |
12 | 29.5k | const nghttp2_frame *frame, void *user_data) { |
13 | 29.5k | return 0; |
14 | 29.5k | } |
15 | | } // namespace |
16 | | |
17 | | namespace { |
18 | | int on_header_callback2(nghttp2_session *session, const nghttp2_frame *frame, |
19 | | nghttp2_rcbuf *name, nghttp2_rcbuf *value, |
20 | 53.6k | uint8_t flags, void *user_data) { |
21 | 53.6k | return 0; |
22 | 53.6k | } |
23 | | } // namespace |
24 | | |
25 | | namespace { |
26 | | int before_frame_send_callback(nghttp2_session *session, |
27 | 48.8k | const nghttp2_frame *frame, void *user_data) { |
28 | 48.8k | return 0; |
29 | 48.8k | } |
30 | | } // namespace |
31 | | |
32 | | namespace { |
33 | | int on_frame_send_callback(nghttp2_session *session, const nghttp2_frame *frame, |
34 | 48.8k | void *user_data) { |
35 | 48.8k | return 0; |
36 | 48.8k | } |
37 | | } // namespace |
38 | | |
39 | | namespace { |
40 | 24.5k | void send_pending(nghttp2_session *session) { |
41 | 73.4k | for (;;) { |
42 | 73.4k | const uint8_t *data; |
43 | 73.4k | auto n = nghttp2_session_mem_send2(session, &data); |
44 | 73.4k | if (n == 0) { |
45 | 24.5k | return; |
46 | 24.5k | } |
47 | 73.4k | } |
48 | 24.5k | } |
49 | | } // namespace |
50 | | |
51 | 14.6k | extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { |
52 | 14.6k | nghttp2_session *session; |
53 | 14.6k | nghttp2_session_callbacks *callbacks; |
54 | | |
55 | 14.6k | nghttp2_session_callbacks_new(&callbacks); |
56 | 14.6k | nghttp2_session_callbacks_set_on_frame_recv_callback(callbacks, |
57 | 14.6k | on_frame_recv_callback); |
58 | 14.6k | nghttp2_session_callbacks_set_on_begin_headers_callback( |
59 | 14.6k | callbacks, on_begin_headers_callback); |
60 | 14.6k | nghttp2_session_callbacks_set_on_header_callback2(callbacks, |
61 | 14.6k | on_header_callback2); |
62 | 14.6k | nghttp2_session_callbacks_set_before_frame_send_callback( |
63 | 14.6k | callbacks, before_frame_send_callback); |
64 | 14.6k | nghttp2_session_callbacks_set_on_frame_send_callback(callbacks, |
65 | 14.6k | on_frame_send_callback); |
66 | | |
67 | 14.6k | nghttp2_session_server_new(&session, callbacks, nullptr); |
68 | 14.6k | nghttp2_session_callbacks_del(callbacks); |
69 | | |
70 | 14.6k | nghttp2_settings_entry iv{NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS, 100}; |
71 | 14.6k | nghttp2_submit_settings(session, NGHTTP2_FLAG_NONE, &iv, 1); |
72 | 14.6k | send_pending(session); |
73 | 14.6k | nghttp2_session_mem_recv2(session, data, size); |
74 | 14.6k | send_pending(session); |
75 | | |
76 | 14.6k | nghttp2_session_del(session); |
77 | | |
78 | 14.6k | return 0; |
79 | 14.6k | } |