Coverage Report

Created: 2026-06-01 06:57

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/zstd/tests/fuzz/fuzz_data_producer.c
Line
Count
Source
1
/*
2
 * Copyright (c) Meta Platforms, Inc. and affiliates.
3
 * All rights reserved.
4
 *
5
 * This source code is licensed under both the BSD-style license (found in the
6
 * LICENSE file in the root directory of this source tree) and the GPLv2 (found
7
 * in the COPYING file in the root directory of this source tree).
8
 * You may select, at your option, one of the above-listed licenses.
9
 */
10
11
#include "fuzz_helpers.h"
12
#include "fuzz_data_producer.h"
13
14
struct FUZZ_dataProducer_s{
15
  const uint8_t *data;
16
  size_t size;
17
};
18
19
322k
FUZZ_dataProducer_t *FUZZ_dataProducer_create(const uint8_t *data, size_t size) {
20
322k
    FUZZ_dataProducer_t *producer = FUZZ_malloc(sizeof(FUZZ_dataProducer_t));
21
22
322k
    producer->data = data;
23
322k
    producer->size = size;
24
322k
    return producer;
25
322k
}
26
27
322k
void FUZZ_dataProducer_free(FUZZ_dataProducer_t *producer) { free(producer); }
28
29
uint32_t FUZZ_dataProducer_uint32Range(FUZZ_dataProducer_t *producer, uint32_t min,
30
344M
                                  uint32_t max) {
31
344M
    uint32_t range = max - min;
32
344M
    uint32_t rolling = range;
33
344M
    uint32_t result = 0;
34
35
344M
    FUZZ_ASSERT(min <= max);
36
37
418M
    while (rolling > 0 && producer->size > 0) {
38
74.3M
      uint8_t next = *(producer->data + producer->size - 1);
39
74.3M
      producer->size -= 1;
40
74.3M
      result = (result << 8) | next;
41
74.3M
      rolling >>= 8;
42
74.3M
    }
43
44
344M
    if (range == 0xffffffff) {
45
7.00k
      return result;
46
7.00k
    }
47
48
344M
    return min + result % (range + 1);
49
344M
}
50
51
7.00k
uint32_t FUZZ_dataProducer_uint32(FUZZ_dataProducer_t *producer) {
52
7.00k
    return FUZZ_dataProducer_uint32Range(producer, 0, 0xffffffff);
53
7.00k
}
54
55
int32_t FUZZ_dataProducer_int32Range(FUZZ_dataProducer_t *producer,
56
                                    int32_t min, int32_t max)
57
154k
{
58
154k
    FUZZ_ASSERT(min <= max);
59
60
154k
    if (min < 0)
61
68.8k
      return (int)FUZZ_dataProducer_uint32Range(producer, 0, max - min) + min;
62
63
85.2k
    return FUZZ_dataProducer_uint32Range(producer, min, max);
64
154k
}
65
66
66.7k
size_t FUZZ_dataProducer_remainingBytes(FUZZ_dataProducer_t *producer){
67
66.7k
    return producer->size;
68
66.7k
}
69
70
void FUZZ_dataProducer_rollBack(FUZZ_dataProducer_t *producer, size_t remainingBytes)
71
49.5k
{
72
49.5k
    FUZZ_ASSERT(remainingBytes >= producer->size);
73
49.5k
    producer->size = remainingBytes;
74
49.5k
}
75
76
5.37M
int FUZZ_dataProducer_empty(FUZZ_dataProducer_t *producer) {
77
5.37M
    return producer->size == 0;
78
5.37M
}
79
80
size_t FUZZ_dataProducer_contract(FUZZ_dataProducer_t *producer, size_t newSize)
81
298k
{
82
298k
    const size_t effectiveNewSize = newSize > producer->size ? producer->size : newSize;
83
84
298k
    size_t remaining = producer->size - effectiveNewSize;
85
298k
    producer->data = producer->data + remaining;
86
298k
    producer->size = effectiveNewSize;
87
298k
    return remaining;
88
298k
}
89
90
size_t FUZZ_dataProducer_reserveDataPrefix(FUZZ_dataProducer_t *producer)
91
298k
{
92
298k
    size_t producerSliceSize = FUZZ_dataProducer_uint32Range(
93
298k
                                  producer, 0, producer->size);
94
298k
    return FUZZ_dataProducer_contract(producer, producerSliceSize);
95
298k
}