#include <sepol/debug.h>

#include <sepol/kernel_to_cil.h>

#include <sepol/kernel_to_conf.h>

#include <sepol/module_to_cil.h>

#include <sepol/policydb/expand.h>

#include <sepol/policydb/hierarchy.h>

#include <sepol/policydb/link.h>

#include <sepol/policydb/policydb.h>

extern int policydb_validate(sepol_handle_t *handle, const policydb_t *p);

extern int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size);

// set to 1 to enable more verbose libsepol logging

#ifndef VERBOSE

#define VERBOSE 0

#endif

static int write_binary_policy(policydb_t *p, FILE *outfp)

{

  struct policy_file pf;

  policy_file_init(&pf);

  pf.type = PF_USE_STDIO;

  pf.fp = outfp;

  return policydb_write(p, &pf);

}

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)

{

  policydb_t policydb = {}, out = {};

  sidtab_t sidtab = {};

  struct policy_file pf;

  FILE *devnull = NULL;

  sepol_debug(VERBOSE);

  policy_file_init(&pf);

  pf.type = PF_USE_MEMORY;

  pf.data = (char *)data;

  pf.len = size;

  if (policydb_init(&policydb))

    goto exit;

  if (policydb_read(&policydb, &pf, VERBOSE))

    goto exit;

  if (policydb_load_isids(&policydb, &sidtab))

    goto exit;

  if (policydb.policy_type == POLICY_KERN) {

    (void)policydb_optimize(&policydb);

    if (policydb_validate(NULL, &policydb) == -1)

      abort();

  }

  if (policydb.global->branch_list)

    (void)check_assertions(NULL, &policydb,

               policydb.global->branch_list->avrules);

  (void)hierarchy_check_constraints(NULL, &policydb);

  devnull = fopen("/dev/null", "we");

  if (!devnull)

    goto exit;

  if (write_binary_policy(&policydb, devnull))

    abort();

  if (policydb.policy_type == POLICY_KERN) {

    if (sepol_kernel_policydb_to_conf(devnull, &policydb))

      abort();

    if (sepol_kernel_policydb_to_cil(devnull, &policydb))

      abort();

  } else {

    if (sepol_module_policydb_to_cil(devnull, &policydb, 0))

      abort();

    if (policydb.policy_type == POLICY_BASE) {

      if (link_modules(NULL, &policydb, NULL, 0, VERBOSE))

        goto exit;

      if (policydb_init(&out))

        goto exit;

      if (expand_module(NULL, &policydb, &out, VERBOSE,

            /*check_assertions=*/0))

        goto exit;

      if (policydb_validate(NULL, &out))

        goto exit;

      (void)check_assertions(

        NULL, &out, out.global->branch_list->avrules);

      (void)hierarchy_check_constraints(NULL, &out);

      if (write_binary_policy(&out, devnull))

        abort();

      if (sepol_kernel_policydb_to_conf(devnull, &out))

        abort();

      if (sepol_kernel_policydb_to_cil(devnull, &out))

        abort();

    }

  }

exit:

  if (devnull != NULL)

    fclose(devnull);

  policydb_destroy(&out);

  policydb_destroy(&policydb);

  sepol_sidtab_destroy(&sidtab);

  /* Non-zero return values are reserved for future use. */

  return 0;

}

#ifdef DEFINEMAIN

#include <sys/stat.h>

#include <sys/mman.h>

int main(int argc, char **argv)

{

  if (argc < 2) {

    fprintf(stderr, "usage: %s fuzzer-input-file\n", argv[0]);

    exit(1);

  }

  FILE *fp = fopen(argv[1], "rb");

  if (!fp) {

    perror(argv[1]);

    exit(1);

  }

  struct stat sb;

  int rc;

  rc = fstat(fileno(fp), &sb);

  if (rc < 0) {

    perror("fstat");

    exit(1);

  }

  void *address = mmap(NULL, sb.st_size, PROT_READ | PROT_WRITE,

           MAP_PRIVATE, fileno(fp), 0);

  if (address == MAP_FAILED) {

    perror("mmap");

    exit(1);

  }

  return LLVMFuzzerTestOneInput(address, sb.st_size);

}

#endif