mirror of
https://gitlab.gnome.org/GNOME/glib.git
synced 2025-07-23 18:37:50 +02:00
.gitlab-ci
.reuse
LICENSES
docs
fuzzing
README.md
driver.c
fuzz.h
fuzz_bookmark.c
fuzz_bookmark.corpus
fuzz_canonicalize_filename.c
fuzz_data_input_stream_read_line.c
fuzz_data_input_stream_read_line_utf8.c
fuzz_data_input_stream_read_upto.c
fuzz_date_parse.c
fuzz_date_time_new_from_iso8601.c
fuzz_dbus_message.c
fuzz_inet_address_mask_new_from_string.c
fuzz_inet_address_new_from_string.c
fuzz_inet_socket_address_new_from_string.c
fuzz_key.c
fuzz_key.corpus
fuzz_network_address_parse.c
fuzz_network_address_parse_uri.c
fuzz_paths.c
fuzz_resolver.c
fuzz_string.c
fuzz_uri_escape.c
fuzz_uri_parse.c
fuzz_uri_parse_params.c
fuzz_utf8_normalize.c
fuzz_utf8_validate.c
fuzz_uuid_string_is_valid.c
fuzz_variant_binary.c
fuzz_variant_binary_byteswap.c
fuzz_variant_text.c
fuzz_variant_text.dict
meson.build
gio
girepository
glib
gmodule
gobject
gthread
m4macros
po
subprojects
tests
tools
.clang-format
.dir-locals.el
.editorconfig
.gitignore
.gitlab-ci.yml
.gitmodules
.lcovrc
CODE_OF_CONDUCT.md
CONTRIBUTING.md
COPYING
INSTALL.md
NEWS
README.md
SECURITY.md
glib.doap
meson.build
meson.options
While reading a single byte or uint16 from an input stream is fairly simple and uncontroversial, the code to read a line or read up to any of a set of stop characters is not so trivial. People may be using `GDataInputStream` to parse untrusted input like this, so we should probably test that it’s robust against a variety of input conditions. Signed-off-by: Philip Withnall <pwithnall@gnome.org>
45 lines
1.4 KiB
C
45 lines
1.4 KiB
C
/*
|
|
* Copyright 2024 GNOME Foundation, Inc.
|
|
*
|
|
* SPDX-License-Identifier: LGPL-2.1-or-later
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "fuzz.h"
|
|
|
|
int
|
|
LLVMFuzzerTestOneInput (const unsigned char *data, size_t size)
|
|
{
|
|
GInputStream *base_stream = NULL;
|
|
GDataInputStream *input_stream = NULL;
|
|
char *line = NULL;
|
|
size_t line_length = 0;
|
|
|
|
fuzz_set_logging_func ();
|
|
|
|
base_stream = g_memory_input_stream_new_from_data (data, size, NULL);
|
|
input_stream = g_data_input_stream_new (base_stream);
|
|
|
|
line = g_data_input_stream_read_line_utf8 (input_stream, &line_length, NULL, NULL);
|
|
g_assert (line != NULL || line_length == 0);
|
|
g_assert (line_length <= size);
|
|
g_free (line);
|
|
|
|
g_clear_object (&input_stream);
|
|
g_clear_object (&base_stream);
|
|
|
|
return 0;
|
|
}
|