mirror/stedolan-jq
1
0
Fork 0
mirror of https://github.com/stedolan/jq.git synced 2024-05-11 05:55:39 +00:00
Code Issues Releases Activity

Add fuzzer targeting jq_next

Browse Source 
Signed-off-by: David Korczynski <david@adalogics.com>
This commit is contained in:
David Korczynski
2023-11-30 13:22:27 +00:00
committed by Emanuele Torre
parent 13353515bd
commit 252ab244ce
1 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
tests/jq_fuzz_execute.cpp Normal file
View File

@@ -0,0 +1,40 @@
#include <fuzzer/FuzzedDataProvider.h>
#include <string>
extern "C" {
#include "jq.h"
#include "jv.h"
}
// Fuzzer inspired by /src/jq_test.c
// The goal is to have the fuzzer execute the functions:
// jq_compile -> jv_parse -> jq_next.
extern "C" int LLVMFuzzerTestOneInput(uint8_t *data, size_t size) {
FuzzedDataProvider fdp(data, size);
std::string prog_payload = fdp.ConsumeRandomLengthString();
std::string parse_payload1 = fdp.ConsumeRandomLengthString();
std::string parse_payload2 = fdp.ConsumeRandomLengthString();
jq_state *jq = NULL;
jq = jq_init();
if (jq != NULL) {
if (jq_compile(jq, prog_payload.c_str())) {
// Process to jv_parse and then jv_next
jv input = jv_parse(parse_payload1.c_str());
if (jv_is_valid(input)) {
jq_start(jq, input, 0);
jv next = jv_parse(parse_payload2.c_str());
if (jv_is_valid(next)) {
jv actual = jq_next(jq);
jv_free(actual);
}
jv_free(next);
}
// Do not free "input" as this is handled by jq_teardown.
}
}
jq_teardown(&jq);
return 0;
}