forked from Green-Sky/tomato
Green Sky
227425b90e
git-subtree-dir: external/toxcore/c-toxcore git-subtree-split: 67badf69416a74e74f6d7eb51dd96f37282b8455
107 lines
3.7 KiB
C++
107 lines
3.7 KiB
C++
#include "group_announce.h"
|
|
|
|
#include <cassert>
|
|
#include <memory>
|
|
#include <vector>
|
|
|
|
#include "../testing/fuzzing/fuzz_support.h"
|
|
|
|
namespace {
|
|
|
|
void TestUnpackAnnouncesList(Fuzz_Data &input)
|
|
{
|
|
CONSUME1_OR_RETURN(const uint8_t max_count, input);
|
|
std::vector<GC_Announce> announces(max_count);
|
|
|
|
// TODO(iphydf): How do we know the packed size?
|
|
CONSUME1_OR_RETURN(const uint16_t packed_size, input);
|
|
|
|
Logger *logger = logger_new();
|
|
if (gca_unpack_announces_list(logger, input.data, input.size, announces.data(), max_count)
|
|
!= -1) {
|
|
std::vector<uint8_t> packed(packed_size);
|
|
size_t processed;
|
|
gca_pack_announces_list(
|
|
logger, packed.data(), packed.size(), announces.data(), announces.size(), &processed);
|
|
}
|
|
logger_kill(logger);
|
|
}
|
|
|
|
void TestUnpackPublicAnnounce(Fuzz_Data &input)
|
|
{
|
|
GC_Public_Announce public_announce;
|
|
|
|
// TODO(iphydf): How do we know the packed size?
|
|
CONSUME1_OR_RETURN(const uint16_t packed_size, input);
|
|
|
|
Logger *logger = logger_new();
|
|
if (gca_unpack_public_announce(logger, input.data, input.size, &public_announce) != -1) {
|
|
std::vector<uint8_t> packed(packed_size);
|
|
gca_pack_public_announce(logger, packed.data(), packed.size(), &public_announce);
|
|
}
|
|
logger_kill(logger);
|
|
}
|
|
|
|
void TestDoGca(Fuzz_Data &input)
|
|
{
|
|
std::unique_ptr<Logger, void (*)(Logger *)> logger(logger_new(), logger_kill);
|
|
std::unique_ptr<Mono_Time, void (*)(Mono_Time *)> mono_time(
|
|
mono_time_new(nullptr, nullptr), mono_time_free);
|
|
assert(mono_time != nullptr);
|
|
uint64_t clock = 1;
|
|
mono_time_set_current_time_callback(
|
|
mono_time.get(), [](void *user_data) { return *static_cast<uint64_t *>(user_data); },
|
|
&clock);
|
|
std::unique_ptr<GC_Announces_List, void (*)(GC_Announces_List *)> gca(new_gca_list(), kill_gca);
|
|
assert(gca != nullptr);
|
|
|
|
while (input.size > 0) {
|
|
CONSUME1_OR_RETURN(const uint8_t choice, input);
|
|
switch (choice) {
|
|
case 0: {
|
|
// Add an announce.
|
|
CONSUME1_OR_RETURN(const uint16_t length, input);
|
|
CONSUME_OR_RETURN(const uint8_t *data, input, length);
|
|
GC_Public_Announce public_announce;
|
|
if (gca_unpack_public_announce(logger.get(), data, length, &public_announce) != -1) {
|
|
gca_add_announce(mono_time.get(), gca.get(), &public_announce);
|
|
}
|
|
break;
|
|
}
|
|
case 1: {
|
|
// Advance the time by a number of tox_iteration_intervals.
|
|
CONSUME1_OR_RETURN(const uint8_t iterations, input);
|
|
clock += iterations * 20;
|
|
// Do an iteration.
|
|
do_gca(mono_time.get(), gca.get());
|
|
break;
|
|
}
|
|
case 2: {
|
|
// Get announces.
|
|
CONSUME1_OR_RETURN(const uint8_t max_nodes, input);
|
|
std::vector<GC_Announce> gc_announces(max_nodes);
|
|
CONSUME_OR_RETURN(const uint8_t *chat_id, input, CHAT_ID_SIZE);
|
|
CONSUME_OR_RETURN(const uint8_t *except_public_key, input, ENC_PUBLIC_KEY_SIZE);
|
|
gca_get_announces(
|
|
gca.get(), gc_announces.data(), max_nodes, chat_id, except_public_key);
|
|
break;
|
|
}
|
|
case 3: {
|
|
// Remove a chat.
|
|
CONSUME_OR_RETURN(const uint8_t *chat_id, input, CHAT_ID_SIZE);
|
|
cleanup_gca(gca.get(), chat_id);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
} // namespace
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size);
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
|
|
{
|
|
fuzz_select_target(data, size, TestUnpackAnnouncesList, TestUnpackPublicAnnounce, TestDoGca);
|
|
return 0;
|
|
}
|