Coverage Report

Created: 2025-08-03 06:38

/src/nghttp2/fuzz/fuzz_target.cc
Line
Count
Source
1
#include <nghttp2/nghttp2.h>
2
3
namespace {
4
int on_frame_recv_callback(nghttp2_session *session, const nghttp2_frame *frame,
5
17.1k
                           void *user_data) {
6
17.1k
  return 0;
7
17.1k
}
8
} // namespace
9
10
namespace {
11
int on_begin_headers_callback(nghttp2_session *session,
12
29.5k
                              const nghttp2_frame *frame, void *user_data) {
13
29.5k
  return 0;
14
29.5k
}
15
} // namespace
16
17
namespace {
18
int on_header_callback2(nghttp2_session *session, const nghttp2_frame *frame,
19
                        nghttp2_rcbuf *name, nghttp2_rcbuf *value,
20
53.6k
                        uint8_t flags, void *user_data) {
21
53.6k
  return 0;
22
53.6k
}
23
} // namespace
24
25
namespace {
26
int before_frame_send_callback(nghttp2_session *session,
27
48.8k
                               const nghttp2_frame *frame, void *user_data) {
28
48.8k
  return 0;
29
48.8k
}
30
} // namespace
31
32
namespace {
33
int on_frame_send_callback(nghttp2_session *session, const nghttp2_frame *frame,
34
48.8k
                           void *user_data) {
35
48.8k
  return 0;
36
48.8k
}
37
} // namespace
38
39
namespace {
40
24.5k
void send_pending(nghttp2_session *session) {
41
73.4k
  for (;;) {
42
73.4k
    const uint8_t *data;
43
73.4k
    auto n = nghttp2_session_mem_send2(session, &data);
44
73.4k
    if (n == 0) {
45
24.5k
      return;
46
24.5k
    }
47
73.4k
  }
48
24.5k
}
49
} // namespace
50
51
14.6k
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
52
14.6k
  nghttp2_session *session;
53
14.6k
  nghttp2_session_callbacks *callbacks;
54
55
14.6k
  nghttp2_session_callbacks_new(&callbacks);
56
14.6k
  nghttp2_session_callbacks_set_on_frame_recv_callback(callbacks,
57
14.6k
                                                       on_frame_recv_callback);
58
14.6k
  nghttp2_session_callbacks_set_on_begin_headers_callback(
59
14.6k
    callbacks, on_begin_headers_callback);
60
14.6k
  nghttp2_session_callbacks_set_on_header_callback2(callbacks,
61
14.6k
                                                    on_header_callback2);
62
14.6k
  nghttp2_session_callbacks_set_before_frame_send_callback(
63
14.6k
    callbacks, before_frame_send_callback);
64
14.6k
  nghttp2_session_callbacks_set_on_frame_send_callback(callbacks,
65
14.6k
                                                       on_frame_send_callback);
66
67
14.6k
  nghttp2_session_server_new(&session, callbacks, nullptr);
68
14.6k
  nghttp2_session_callbacks_del(callbacks);
69
70
14.6k
  nghttp2_settings_entry iv{NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS, 100};
71
14.6k
  nghttp2_submit_settings(session, NGHTTP2_FLAG_NONE, &iv, 1);
72
14.6k
  send_pending(session);
73
14.6k
  nghttp2_session_mem_recv2(session, data, size);
74
14.6k
  send_pending(session);
75
76
14.6k
  nghttp2_session_del(session);
77
78
14.6k
  return 0;
79
14.6k
}