Green Sky
8eb4892b49
6d634674a9 cleanup: Remove old type-ordered event getters. d1d48d1dfc feat: add ngc events 994ffecc6b refactor: Make event dispatch ordered by receive time. 812f931d5f fix: Make sure there's enough space for CONSUME1 in fuzzers. 50f1b30fa9 test: Add fuzz tests to the coverage run. df76f5cf47 chore: Move from gcov to llvm source-based coverage. 072e3beb3f fix: issues with packet broadcast error reporting 6b6718e4d2 cleanup: Make group packet entry creation less error-prone 5b9c420ce1 refactor: packet broadcast functions now return errors af4cb31028 refactor: Use `operator==` for equality tests of `Node_format`. 9592d590cf refactor(test): Slightly nicer C++ interface to tox Random. c66e10fb7a refactor: Minor refactoring of get_close_nodes functions. ebc9643862 fix: don't pass garbage data buffer to packet send functions 32b68cffca cleanup: Some more test cleanups, removing overly smart code. 0426624dcb refactor: Assign malloc return to a local variable first. afc38f2458 test: Add more unit tests for `add_to_list`. 05ce5c1ab9 test: Add "infer" CI check to github, remove from circle. REVERT: 8f0d505f9a feat: add ngc events REVERT: 9b8216e70c refactor: Make event dispatch ordered by receive time. git-subtree-dir: external/toxcore/c-toxcore git-subtree-split: 6d634674a929edb0ab70689dcbcb195b3547be13
95 lines
3.8 KiB
C++
95 lines
3.8 KiB
C++
#include "tox_events.h"
|
|
|
|
#include <cassert>
|
|
#include <cstdint>
|
|
#include <cstring>
|
|
#include <vector>
|
|
|
|
#include "../testing/fuzzing/fuzz_support.h"
|
|
#include "tox_dispatch.h"
|
|
|
|
namespace {
|
|
|
|
void TestUnpack(Fuzz_Data data)
|
|
{
|
|
// 2 bytes: size of the events data
|
|
CONSUME_OR_RETURN(const uint8_t *events_size_bytes, data, sizeof(uint16_t));
|
|
uint16_t events_size;
|
|
std::memcpy(&events_size, events_size_bytes, sizeof(uint16_t));
|
|
|
|
// events_size bytes: events data (max 64K)
|
|
CONSUME_OR_RETURN(const uint8_t *events_data, data, events_size);
|
|
|
|
if (data.size == 0) {
|
|
// If there's no more input, no malloc failure paths can possibly be
|
|
// tested, so we ignore this input.
|
|
return;
|
|
}
|
|
|
|
// rest of the fuzz data is input for malloc
|
|
Fuzz_System sys{data};
|
|
|
|
Tox_Dispatch *dispatch = tox_dispatch_new(nullptr);
|
|
assert(dispatch != nullptr);
|
|
|
|
auto ignore = [](Tox *tox, auto *event, void *user_data) {};
|
|
tox_events_callback_conference_connected(dispatch, ignore);
|
|
tox_events_callback_conference_invite(dispatch, ignore);
|
|
tox_events_callback_conference_message(dispatch, ignore);
|
|
tox_events_callback_conference_peer_list_changed(dispatch, ignore);
|
|
tox_events_callback_conference_peer_name(dispatch, ignore);
|
|
tox_events_callback_conference_title(dispatch, ignore);
|
|
tox_events_callback_file_chunk_request(dispatch, ignore);
|
|
tox_events_callback_file_recv(dispatch, ignore);
|
|
tox_events_callback_file_recv_chunk(dispatch, ignore);
|
|
tox_events_callback_file_recv_control(dispatch, ignore);
|
|
tox_events_callback_friend_connection_status(dispatch, ignore);
|
|
tox_events_callback_friend_lossless_packet(dispatch, ignore);
|
|
tox_events_callback_friend_lossy_packet(dispatch, ignore);
|
|
tox_events_callback_friend_message(dispatch, ignore);
|
|
tox_events_callback_friend_name(dispatch, ignore);
|
|
tox_events_callback_friend_read_receipt(dispatch, ignore);
|
|
tox_events_callback_friend_request(dispatch, ignore);
|
|
tox_events_callback_friend_status(dispatch, ignore);
|
|
tox_events_callback_friend_status_message(dispatch, ignore);
|
|
tox_events_callback_friend_typing(dispatch, ignore);
|
|
tox_events_callback_self_connection_status(dispatch, ignore);
|
|
tox_events_callback_group_peer_name(dispatch, ignore);
|
|
tox_events_callback_group_peer_status(dispatch, ignore);
|
|
tox_events_callback_group_topic(dispatch, ignore);
|
|
tox_events_callback_group_privacy_state(dispatch, ignore);
|
|
tox_events_callback_group_voice_state(dispatch, ignore);
|
|
tox_events_callback_group_topic_lock(dispatch, ignore);
|
|
tox_events_callback_group_peer_limit(dispatch, ignore);
|
|
tox_events_callback_group_password(dispatch, ignore);
|
|
tox_events_callback_group_message(dispatch, ignore);
|
|
tox_events_callback_group_private_message(dispatch, ignore);
|
|
tox_events_callback_group_custom_packet(dispatch, ignore);
|
|
tox_events_callback_group_custom_private_packet(dispatch, ignore);
|
|
tox_events_callback_group_invite(dispatch, ignore);
|
|
tox_events_callback_group_peer_join(dispatch, ignore);
|
|
tox_events_callback_group_peer_exit(dispatch, ignore);
|
|
tox_events_callback_group_self_join(dispatch, ignore);
|
|
tox_events_callback_group_join_fail(dispatch, ignore);
|
|
tox_events_callback_group_moderation(dispatch, ignore);
|
|
|
|
Tox_Events *events = tox_events_load(sys.sys.get(), events_data, events_size);
|
|
if (events) {
|
|
std::vector<uint8_t> packed(tox_events_bytes_size(events));
|
|
tox_events_get_bytes(events, packed.data());
|
|
|
|
tox_dispatch_invoke(dispatch, events, nullptr, nullptr);
|
|
}
|
|
tox_events_free(events);
|
|
tox_dispatch_free(dispatch);
|
|
}
|
|
|
|
} // namespace
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size);
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
|
|
{
|
|
TestUnpack(Fuzz_Data(data, size));
|
|
return 0;
|
|
}
|