Coverage Report

Created: 2025-12-30 08:42

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/node/test/fuzzers/fuzz_zlib_createBrotliDecompress.cc
Line
Count
Source
1
// Copyright 2025 Google LLC
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
15
#include <cstdint>
16
#include <string>
17
#include "fuzzer/FuzzedDataProvider.h"
18
#include "fuzz_common.h"
19
#include "fuzz_js_format.h"
20
21
// Stream-like API; still fine with drain-until-idle.
22
namespace {
23
constexpr const char* kSrc = R"JS(
24
  (function(ab){
25
    const zlib = require('zlib');
26
    const dec = zlib.createBrotliDecompress();
27
    try {
28
      dec.write(Buffer.from(ab));
29
      dec.flush();
30
    } catch (_e) {}
31
  })
32
)JS";
33
}
34
35
10.2k
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
36
10.2k
  FuzzedDataProvider fdp(data, size);
37
38
10.2k
  const std::string a0 = fdp.ConsumeRemainingBytesAsString();
39
40
10.2k
  fuzz::IsolateScope iso;
41
10.2k
  if (!iso.ok()) return 0;
42
43
10.2k
  const std::string js = FormatJs(
44
10.2k
      "try { ({0})({1}); } catch (e) {}",
45
10.2k
      std::string(kSrc),
46
10.2k
      ToSingleQuotedJsLiteral(a0));
47
10.2k
  fuzz::RunEnvString(iso.isolate(), js.c_str());
48
10.2k
  return 0;
49
10.2k
}