Coverage Report

Created: 2026-08-06 06:25

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/fuzz_randomizer.cpp
Line
Count
Source
1
/* Copyright 2021 Google LLC
2
Licensed under the Apache License, Version 2.0 (the "License");
3
you may not use this file except in compliance with the License.
4
You may obtain a copy of the License at
5
      http://www.apache.org/licenses/LICENSE-2.0
6
Unless required by applicable law or agreed to in writing, software
7
distributed under the License is distributed on an "AS IS" BASIS,
8
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
9
See the License for the specific language governing permissions and
10
limitations under the License.
11
*/
12
13
#include <fuzzer/FuzzedDataProvider.h>
14
#include <assert.h>
15
16
FuzzedDataProvider *prov = NULL;
17
18
3.97k
extern "C" void fuzz_random_init(const uint8_t *data, size_t size) {
19
3.97k
   assert(prov == NULL);
20
3.97k
   prov = new FuzzedDataProvider(data, size);
21
3.97k
}
22
23
3.97k
extern "C" void fuzz_random_destroy() {
24
3.97k
   assert(prov != NULL);
25
3.97k
  delete prov;
26
3.97k
  prov = NULL;
27
3.97k
}
28
29
19.5k
extern "C" char *get_random_string() {
30
19.5k
   assert(prov != NULL);
31
32
19.5k
   std::string s1 = prov->ConsumeRandomLengthString();
33
19.5k
   char *tmp = (char *)malloc(s1.size() + 1);
34
19.5k
   memcpy(tmp, s1.c_str(), s1.size());
35
19.5k
   tmp[s1.size()] = '\0';
36
19.5k
   return tmp;
37
19.5k
}
38
39
38.2k
extern "C" int fuzz_randomizer_get_int(int min, int max) {
40
38.2k
   assert(prov != NULL);
41
38.2k
   return prov->ConsumeIntegralInRange<int>(min, max);
42
38.2k
} 
43
44
841
extern "C" char *fuzz_random_get_string_max_length(int max_len) {
45
841
  assert(prov != NULL);
46
47
841
  std::string s1 = prov->ConsumeBytesAsString(
48
841
                           prov->ConsumeIntegralInRange<uint32_t>(1, max_len));
49
841
  char *tmp123 = (char*)malloc(s1.size()+1);
50
841
  memcpy(tmp123, s1.c_str(), s1.size());
51
841
  tmp123[s1.size()] = '\0';
52
53
841
  return tmp123;
54
841
}
55
56
2.91k
extern "C" size_t fuzz_get_random_data(void *buf, size_t len) {
57
2.91k
  assert(prov != NULL);
58
2.91k
  size_t ret_val;
59
2.91k
  char *cbuf = (char*)buf;
60
61
2.91k
  if (prov->remaining_bytes() == 0) {
62
295
    return -1;
63
295
  }
64
65
2.61k
  double prob = prov->ConsumeProbability<double>();
66
2.61k
  if (prob < 0.05) {
67
1.27k
    return 0;
68
1.27k
  }
69
70
  //if (len == 1) {
71
  //  ret_val = prov->ConsumeData(buf, 1);
72
  //  return ret_val;
73
  //}
74
1.34k
  ret_val = prov->ConsumeData(buf, len);
75
1.34k
  return ret_val;
76
2.61k
}
77
 
78
79
// Simple garbage collector
80
83.4k
#define GB_SIZE 100
81
void *pointer_arr[GB_SIZE];
82
static int pointer_idx = 0;
83
84
// If the garbage collector is used then this must be called as first thing
85
// during a fuzz run.
86
413
extern "C" void gb_init() {
87
413
  pointer_idx = 0;
88
89
41.7k
   for (int i = 0; i < GB_SIZE; i++) {
90
41.3k
     pointer_arr[i] = NULL;
91
41.3k
   }
92
413
}
93
94
413
extern "C" void gb_cleanup() {
95
41.7k
  for(int i = 0; i < GB_SIZE; i++) {
96
41.3k
    if (pointer_arr[i] != NULL) {
97
8.40k
      free(pointer_arr[i]);
98
8.40k
    }
99
41.3k
  }
100
413
}
101
102
8.40k
extern "C" char *gb_get_random_string() {
103
8.40k
  char *tmp = get_random_string();
104
8.40k
  pointer_arr[pointer_idx++] = (void*)tmp;
105
8.40k
  return tmp;
106
8.40k
}
107