mirror of
https://github.com/GNOME/libxml2.git
synced 2025-05-10 05:39:06 +08:00
00ed736eec
- XML fuzzer Currently tests the pull parser, push parser and reader, as well as serialization. Supports splitting fuzz data into multiple documents for things like external DTDs or entities. The seed corpus is built from parts of the test suite. - Regexp fuzzer Seed corpus was statically generated from test suite. - URI fuzzer Tests parsing and most other functions from uri.c.
41 lines
878 B
C
41 lines
878 B
C
/*
|
|
* regexp.c: a libFuzzer target to test the regexp module.
|
|
*
|
|
* See Copyright for the status of this software.
|
|
*/
|
|
|
|
#include <libxml/xmlregexp.h>
|
|
#include "fuzz.h"
|
|
|
|
int
|
|
LLVMFuzzerInitialize(int *argc ATTRIBUTE_UNUSED,
|
|
char ***argv ATTRIBUTE_UNUSED) {
|
|
xmlSetGenericErrorFunc(NULL, xmlFuzzErrorFunc);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
LLVMFuzzerTestOneInput(const char *data, size_t size) {
|
|
xmlRegexpPtr regexp;
|
|
char *str[2] = { NULL, NULL };
|
|
size_t numStrings;
|
|
|
|
numStrings = xmlFuzzExtractStrings(data, size, str, 2);
|
|
|
|
regexp = xmlRegexpCompile(BAD_CAST str[0]);
|
|
/* xmlRegexpExec has pathological performance in too many cases. */
|
|
#if 0
|
|
if ((regexp != NULL) && (numStrings >= 2)) {
|
|
xmlRegexpExec(regexp, BAD_CAST str[1]);
|
|
}
|
|
#endif
|
|
xmlRegFreeRegexp(regexp);
|
|
|
|
xmlFree(str[0]);
|
|
xmlFree(str[1]);
|
|
|
|
return 0;
|
|
}
|
|
|