Coverage Report

Created: 2025-08-28 06:38

/src/qpdf/fuzz/runlength_fuzzer.cc
Line
Count
Source
1
#include <qpdf/Pl_Discard.hh>
2
#include <qpdf/Pl_RunLength.hh>
3
#include <iostream>
4
#include <stdexcept>
5
6
class FuzzHelper
7
{
8
  public:
9
    FuzzHelper(unsigned char const* data, size_t size);
10
    void run();
11
12
  private:
13
    void doChecks();
14
15
    unsigned char const* data;
16
    size_t size;
17
};
18
19
FuzzHelper::FuzzHelper(unsigned char const* data, size_t size) :
20
306k
    data(data),
21
306k
    size(size)
22
306k
{
23
306k
}
24
25
void
26
FuzzHelper::doChecks()
27
290k
{
28
290k
    Pl_RunLength::setMemoryLimit(1'000'000);
29
290k
    Pl_Discard discard;
30
290k
    Pl_RunLength p("decode", &discard, Pl_RunLength::a_decode);
31
290k
    p.write(const_cast<unsigned char*>(data), size);
32
290k
    p.finish();
33
290k
}
34
35
void
36
FuzzHelper::run()
37
37.2k
{
38
37.2k
    try {
39
37.2k
        doChecks();
40
37.2k
    } catch (std::runtime_error const& e) {
41
30.0k
        std::cerr << "runtime_error: " << e.what() << '\n';
42
30.0k
    }
43
37.2k
}
44
45
extern "C" int
46
LLVMFuzzerTestOneInput(unsigned char const* data, size_t size)
47
306k
{
48
306k
    FuzzHelper f(data, size);
49
306k
    f.run();
50
306k
    return 0;
51
306k
}