Files
tomato/toxcore/tox_events_fuzz_test.cc
Green Sky 9b36dd9d99 Squashed 'external/toxcore/c-toxcore/' changes from c9cdae001..9ed2fa80d
9ed2fa80d fix(toxav): remove extra copy of video frame on encode
de30cf3ad docs: Add new file kinds, that should be useful to all clients.
d5b5e879d fix(DHT): Correct node skipping logic timed out nodes.
30e71fe97 refactor: Generate event dispatch functions and add tox_events_dispatch.
8fdbb0b50 style: Format parameter lists in event handlers.
d00dee12b refactor: Add warning logs when losing chat invites.
b144e8db1 feat: Add a way to look up a file number by ID.
849281ea0 feat: Add a way to fetch groups by chat ID.
a2c177396 refactor: Harden event system and improve type safety.
8f5caa656 refactor: Add MessagePack string support to bin_pack.
34e8d5ad5 chore: Add GitHub CodeQL workflow and local Docker runner.
f7b068010 refactor: Add nullability annotations to event headers.
788abe651 refactor(toxav): Use system allocator for mutexes.
2e4b423eb refactor: Use specific typedefs for public API arrays.
2baf34775 docs(toxav): update idle iteration interval see 679444751876fa3882a717772918ebdc8f083354
2f87ac67b feat: Add Event Loop abstraction (Ev).
f8dfc38d8 test: Fix data race in ToxScenario virtual_clock.
38313921e test(TCP): Add regression test for TCP priority queue integrity.
f94a50d9a refactor(toxav): Replace mutable_mutex with dynamically allocated mutex.
ad054511e refactor: Internalize DHT structs and add debug helpers.
8b467cc96 fix: Prevent potential integer overflow in group chat handshake.
4962bdbb8 test: Improve TCP simulation and add tests
5f0227093 refactor: Allow nullable data in group chat handlers.
e97b18ea9 chore: Improve Windows Docker support.
b14943bbd refactor: Move Logger out of Messenger into Tox.
dd3136250 cleanup: Apply nullability qualifiers to C++ codebase.
1849f70fc refactor: Extract low-level networking code to net and os_network.
8fec75421 refactor: Delete tox_random, align on rng and os_random.
a03ae8051 refactor: Delete tox_memory, align on mem and os_memory.
4c88fed2c refactor: Use `std::` prefixes more consistently in C++ code.
72452f2ae test: Add some more tests for onion and shared key cache.
d5a51b09a cleanup: Use tox_attributes.h in tox_private.h and install it.
b6f5b9fc5 test: Add some benchmarks for various high level things.
8a8d02785 test(support): Introduce threaded Tox runner and simulation barrier
d68d1d095 perf(toxav): optimize audio and video intermediate buffers by keeping them around
REVERT: c9cdae001 fix(toxav): remove extra copy of video frame on encode

git-subtree-dir: external/toxcore/c-toxcore
git-subtree-split: 9ed2fa80d582c714d6bdde6a7648220a92cddff8
2026-02-01 14:26:52 +01:00

103 lines
4.2 KiB
C++

#include "tox_events.h"
#include <cassert>
#include <cstdint>
#include <cstring>
#include <vector>
#include "../testing/support/public/fuzz_data.hh"
#include "../testing/support/public/fuzz_helpers.hh"
#include "../testing/support/public/simulated_environment.hh"
#include "tox_dispatch.h"
namespace {
using tox::test::configure_fuzz_memory_source;
using tox::test::Fuzz_Data;
using tox::test::SimulatedEnvironment;
void TestUnpack(Fuzz_Data data)
{
// 2 bytes: size of the events data
CONSUME_OR_RETURN(const std::uint8_t *events_size_bytes, data, sizeof(std::uint16_t));
std::uint16_t events_size;
std::memcpy(&events_size, events_size_bytes, sizeof(std::uint16_t));
// events_size bytes: events data (max 64K)
CONSUME_OR_RETURN(const std::uint8_t *events_data, data, events_size);
if (data.empty()) {
// If there's no more input, no std::malloc failure paths can possibly be
// tested, so we ignore this input.
return;
}
// rest of the fuzz data is input for std::malloc
SimulatedEnvironment env;
auto node = env.create_node(33445);
configure_fuzz_memory_source(env.fake_memory(), data);
Tox_Dispatch *dispatch = tox_dispatch_new(nullptr);
assert(dispatch != nullptr);
auto ignore = [](auto *event, void *user_data) {};
tox_events_callback_conference_connected(dispatch, ignore);
tox_events_callback_conference_invite(dispatch, ignore);
tox_events_callback_conference_message(dispatch, ignore);
tox_events_callback_conference_peer_list_changed(dispatch, ignore);
tox_events_callback_conference_peer_name(dispatch, ignore);
tox_events_callback_conference_title(dispatch, ignore);
tox_events_callback_file_chunk_request(dispatch, ignore);
tox_events_callback_file_recv(dispatch, ignore);
tox_events_callback_file_recv_chunk(dispatch, ignore);
tox_events_callback_file_recv_control(dispatch, ignore);
tox_events_callback_friend_connection_status(dispatch, ignore);
tox_events_callback_friend_lossless_packet(dispatch, ignore);
tox_events_callback_friend_lossy_packet(dispatch, ignore);
tox_events_callback_friend_message(dispatch, ignore);
tox_events_callback_friend_name(dispatch, ignore);
tox_events_callback_friend_read_receipt(dispatch, ignore);
tox_events_callback_friend_request(dispatch, ignore);
tox_events_callback_friend_status(dispatch, ignore);
tox_events_callback_friend_status_message(dispatch, ignore);
tox_events_callback_friend_typing(dispatch, ignore);
tox_events_callback_self_connection_status(dispatch, ignore);
tox_events_callback_group_peer_name(dispatch, ignore);
tox_events_callback_group_peer_status(dispatch, ignore);
tox_events_callback_group_topic(dispatch, ignore);
tox_events_callback_group_privacy_state(dispatch, ignore);
tox_events_callback_group_voice_state(dispatch, ignore);
tox_events_callback_group_topic_lock(dispatch, ignore);
tox_events_callback_group_peer_limit(dispatch, ignore);
tox_events_callback_group_password(dispatch, ignore);
tox_events_callback_group_message(dispatch, ignore);
tox_events_callback_group_private_message(dispatch, ignore);
tox_events_callback_group_custom_packet(dispatch, ignore);
tox_events_callback_group_custom_private_packet(dispatch, ignore);
tox_events_callback_group_invite(dispatch, ignore);
tox_events_callback_group_peer_join(dispatch, ignore);
tox_events_callback_group_peer_exit(dispatch, ignore);
tox_events_callback_group_self_join(dispatch, ignore);
tox_events_callback_group_join_fail(dispatch, ignore);
tox_events_callback_group_moderation(dispatch, ignore);
Tox_Events *events = tox_events_load(&node->system, events_data, events_size);
if (events) {
std::vector<std::uint8_t> packed(tox_events_bytes_size(events));
tox_events_get_bytes(events, packed.data());
tox_dispatch_invoke(dispatch, events, nullptr);
}
tox_events_free(events);
tox_dispatch_free(dispatch);
}
} // namespace
extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t *data, std::size_t size);
extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t *data, std::size_t size)
{
TestUnpack(Fuzz_Data(data, size));
return 0;
}