/* * Copyright(c) 2017-2018 Free Software Foundation, Inc. * * This file is part of GNU Wget. * * GNU Wget is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * GNU Wget is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Wget. If not, see . */ #include #include #include // uint8_t #include // fmemopen #include // strncmp #include // free #include // close #include "wget.h" #undef fopen_wgetrc #ifdef __cplusplus extern "C" { #endif #include "url.h" // declarations for wget internal functions int main_wget(int argc, const char **argv); void cleanup(void); FILE *fopen_wget(const char *pathname, const char *mode); FILE *fopen_wgetrc(const char *pathname, const char *mode); void exit_wget(int status); #ifdef __cplusplus } #endif #include "fuzzer.h" FILE *fopen_wget(const char *pathname, const char *mode) { return fopen("/dev/null", mode); } FILE *fopen_wgetrc(const char *pathname, const char *mode) { return NULL; } #ifdef FUZZING void exit_wget(int status) { } #else void exit(int status) { } #endif int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { FILE *bak; struct url *url; struct iri iri; char *in; if (size > 4096) // same as max_len = ... in .options file return 0; bak = stderr; stderr = fopen("/dev/null", "w"); in = (char *) malloc(size + 1); memcpy(in, data, size); in[size] = 0; iri.uri_encoding = (char *) "iso-8859-1"; iri.orig_url = NULL; iri.utf8_encode = 0; url = url_parse(in, NULL, &iri, 0); url_free(url); url = url_parse(in, NULL, &iri, 1); url_free(url); iri.utf8_encode = 1; url = url_parse(in, NULL, &iri, 0); url_free(url); url = url_parse(in, NULL, &iri, 1); url_free(url); free(iri.orig_url); free(in); fclose(stderr); stderr = bak; return 0; }