mirror of
https://github.com/git/git.git
synced 2025-12-12 20:36:24 +01:00
Merge branch 'bt/fuzz-config-parse'
A new fuzz target that exercises config parsing code has been added. * bt/fuzz-config-parse: fuzz: add fuzzer for config parsing
This commit is contained in:
1
Makefile
1
Makefile
@@ -757,6 +757,7 @@ ETAGS_TARGET = TAGS
|
||||
# runs in the future.
|
||||
FUZZ_OBJS += oss-fuzz/dummy-cmd-main.o
|
||||
FUZZ_OBJS += oss-fuzz/fuzz-commit-graph.o
|
||||
FUZZ_OBJS += oss-fuzz/fuzz-config.o
|
||||
FUZZ_OBJS += oss-fuzz/fuzz-date.o
|
||||
FUZZ_OBJS += oss-fuzz/fuzz-pack-headers.o
|
||||
FUZZ_OBJS += oss-fuzz/fuzz-pack-idx.o
|
||||
|
||||
@@ -12,7 +12,7 @@ group "Build fuzzers" make \
|
||||
LIB_FUZZING_ENGINE="-fsanitize=fuzzer,address" \
|
||||
fuzz-all
|
||||
|
||||
for fuzzer in commit-graph date pack-headers pack-idx ; do
|
||||
for fuzzer in commit-graph config date pack-headers pack-idx ; do
|
||||
begin_group "fuzz-$fuzzer"
|
||||
./oss-fuzz/fuzz-$fuzzer -verbosity=0 -runs=1 || exit 1
|
||||
end_group "fuzz-$fuzzer"
|
||||
|
||||
1
oss-fuzz/.gitignore
vendored
1
oss-fuzz/.gitignore
vendored
@@ -1,4 +1,5 @@
|
||||
fuzz-commit-graph
|
||||
fuzz-config
|
||||
fuzz-date
|
||||
fuzz-pack-headers
|
||||
fuzz-pack-idx
|
||||
|
||||
33
oss-fuzz/fuzz-config.c
Normal file
33
oss-fuzz/fuzz-config.c
Normal file
@@ -0,0 +1,33 @@
|
||||
#include "git-compat-util.h"
|
||||
#include "config.h"
|
||||
|
||||
int LLVMFuzzerTestOneInput(const uint8_t *, size_t);
|
||||
static int config_parser_callback(const char *, const char *,
|
||||
const struct config_context *, void *);
|
||||
|
||||
static int config_parser_callback(const char *key, const char *value,
|
||||
const struct config_context *ctx UNUSED,
|
||||
void *data UNUSED)
|
||||
{
|
||||
/*
|
||||
* Visit every byte of memory we are given to make sure the parser
|
||||
* gave it to us appropriately. We need to unconditionally return 0,
|
||||
* but we also want to prevent the strlen from being optimized away.
|
||||
*/
|
||||
size_t c = strlen(key);
|
||||
|
||||
if (value)
|
||||
c += strlen(value);
|
||||
return c == SIZE_MAX;
|
||||
}
|
||||
|
||||
int LLVMFuzzerTestOneInput(const uint8_t *data, const size_t size)
|
||||
{
|
||||
struct config_options config_opts = { 0 };
|
||||
|
||||
config_opts.error_action = CONFIG_ERROR_SILENT;
|
||||
git_config_from_mem(config_parser_callback, CONFIG_ORIGIN_BLOB,
|
||||
"fuzztest-config", (const char *)data, size, NULL,
|
||||
CONFIG_SCOPE_UNKNOWN, &config_opts);
|
||||
return 0;
|
||||
}
|
||||
Reference in New Issue
Block a user