/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ /* This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ /* * Interface definitions for the unified fuzzing interface */ #ifndef FuzzingInterface_h__ #define FuzzingInterface_h__ #include <fstream> #ifdef LIBFUZZER # include "FuzzerExtFunctions.h" #endif #include "FuzzerRegistry.h" #include "mozilla/Assertions.h" #ifndef JS_STANDALONE # include "mozilla/Logging.h" #endif namespace mozilla { #ifdef JS_STANDALONE void fuzzing_log(const char* aFmt, ...); # define MOZ_LOG_EXPAND_ARGS(...) __VA_ARGS__ # define FUZZING_LOG(args) fuzzing_log(MOZ_LOG_EXPAND_ARGS args); #else extern LazyLogModule gFuzzingLog; # define FUZZING_LOG(args) \ MOZ_LOG(mozilla::gFuzzingLog, mozilla::LogLevel::Verbose, args) #endif // JS_STANDALONE typedef int (*FuzzingTestFuncRaw)(const uint8_t*, size_t); #ifdef AFLFUZZ static int afl_interface_raw(const char* testFile, FuzzingTestFuncRaw testFunc) { char* buf = NULL; while (__AFL_LOOP(1000)) { std::ifstream is; is.open(testFile, std::ios::binary); is.seekg(0, std::ios::end); int len = is.tellg(); is.seekg(0, std::ios::beg); MOZ_RELEASE_ASSERT(len >= 0); if (!len) { is.close(); continue; } buf = (char*)realloc(buf, len); MOZ_RELEASE_ASSERT(buf); is.read(buf, len); is.close(); testFunc((uint8_t*)buf, (size_t)len); } free(buf); return 0; } # define MOZ_AFL_INTERFACE_COMMON() \ char* testFilePtr = getenv("MOZ_FUZZ_TESTFILE"); \ if (!testFilePtr) { \ fprintf(stderr, \ "Must specify testfile in MOZ_FUZZ_TESTFILE environment " \ "variable.\n"); \ return 1; \ } \ /* Make a copy of testFilePtr so the testing function can safely call \ * getenv \ */ \ std::string testFile(testFilePtr); # define MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName) \ static int afl_fuzz_##moduleName(const uint8_t* data, size_t size) { \ MOZ_RELEASE_ASSERT(data == NULL && size == 0); \ MOZ_AFL_INTERFACE_COMMON(); \ return ::mozilla::afl_interface_raw(testFile.c_str(), testFunc); \ } \ static void __attribute__((constructor)) AFLRegister##moduleName() { \ ::mozilla::FuzzerRegistry::getInstance().registerModule( \ #moduleName, initFunc, afl_fuzz_##moduleName); \ } #else # define MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName) /* Nothing */ #endif // AFLFUZZ #ifdef LIBFUZZER # define MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, moduleName) \ static void __attribute__((constructor)) LibFuzzerRegister##moduleName() { \ ::mozilla::FuzzerRegistry::getInstance().registerModule( \ #moduleName, initFunc, testFunc); \ } #else # define MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, \ moduleName) /* Nothing */ #endif #define MOZ_FUZZING_INTERFACE_RAW(initFunc, testFunc, moduleName) \ MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, moduleName); \ MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName); } // namespace mozilla #endif // FuzzingInterface_h__