Coverage Report

Created: 2025-11-11 07:02

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/zstd/tests/fuzz/fuzz_data_producer.c
Line
Count
Source
1
/*
2
 * Copyright (c) Meta Platforms, Inc. and affiliates.
3
 * All rights reserved.
4
 *
5
 * This source code is licensed under both the BSD-style license (found in the
6
 * LICENSE file in the root directory of this source tree) and the GPLv2 (found
7
 * in the COPYING file in the root directory of this source tree).
8
 * You may select, at your option, one of the above-listed licenses.
9
 */
10
11
#include "fuzz_helpers.h"
12
#include "fuzz_data_producer.h"
13
14
struct FUZZ_dataProducer_s{
15
  const uint8_t *data;
16
  size_t size;
17
};
18
19
270k
FUZZ_dataProducer_t *FUZZ_dataProducer_create(const uint8_t *data, size_t size) {
20
270k
    FUZZ_dataProducer_t *producer = FUZZ_malloc(sizeof(FUZZ_dataProducer_t));
21
22
270k
    producer->data = data;
23
270k
    producer->size = size;
24
270k
    return producer;
25
270k
}
26
27
270k
void FUZZ_dataProducer_free(FUZZ_dataProducer_t *producer) { free(producer); }
28
29
uint32_t FUZZ_dataProducer_uint32Range(FUZZ_dataProducer_t *producer, uint32_t min,
30
322M
                                  uint32_t max) {
31
322M
    uint32_t range = max - min;
32
322M
    uint32_t rolling = range;
33
322M
    uint32_t result = 0;
34
35
322M
    FUZZ_ASSERT(min <= max);
36
37
378M
    while (rolling > 0 && producer->size > 0) {
38
55.2M
      uint8_t next = *(producer->data + producer->size - 1);
39
55.2M
      producer->size -= 1;
40
55.2M
      result = (result << 8) | next;
41
55.2M
      rolling >>= 8;
42
55.2M
    }
43
44
322M
    if (range == 0xffffffff) {
45
6.69k
      return result;
46
6.69k
    }
47
48
322M
    return min + result % (range + 1);
49
322M
}
50
51
6.69k
uint32_t FUZZ_dataProducer_uint32(FUZZ_dataProducer_t *producer) {
52
6.69k
    return FUZZ_dataProducer_uint32Range(producer, 0, 0xffffffff);
53
6.69k
}
54
55
int32_t FUZZ_dataProducer_int32Range(FUZZ_dataProducer_t *producer,
56
                                    int32_t min, int32_t max)
57
165k
{
58
165k
    FUZZ_ASSERT(min <= max);
59
60
165k
    if (min < 0)
61
73.5k
      return (int)FUZZ_dataProducer_uint32Range(producer, 0, max - min) + min;
62
63
92.3k
    return FUZZ_dataProducer_uint32Range(producer, min, max);
64
165k
}
65
66
61.2k
size_t FUZZ_dataProducer_remainingBytes(FUZZ_dataProducer_t *producer){
67
61.2k
    return producer->size;
68
61.2k
}
69
70
void FUZZ_dataProducer_rollBack(FUZZ_dataProducer_t *producer, size_t remainingBytes)
71
38.4k
{
72
38.4k
    FUZZ_ASSERT(remainingBytes >= producer->size);
73
38.4k
    producer->size = remainingBytes;
74
38.4k
}
75
76
4.73M
int FUZZ_dataProducer_empty(FUZZ_dataProducer_t *producer) {
77
4.73M
    return producer->size == 0;
78
4.73M
}
79
80
size_t FUZZ_dataProducer_contract(FUZZ_dataProducer_t *producer, size_t newSize)
81
236k
{
82
236k
    const size_t effectiveNewSize = newSize > producer->size ? producer->size : newSize;
83
84
236k
    size_t remaining = producer->size - effectiveNewSize;
85
236k
    producer->data = producer->data + remaining;
86
236k
    producer->size = effectiveNewSize;
87
236k
    return remaining;
88
236k
}
89
90
size_t FUZZ_dataProducer_reserveDataPrefix(FUZZ_dataProducer_t *producer)
91
236k
{
92
236k
    size_t producerSliceSize = FUZZ_dataProducer_uint32Range(
93
236k
                                  producer, 0, producer->size);
94
236k
    return FUZZ_dataProducer_contract(producer, producerSliceSize);
95
236k
}