diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-13 14:07:11 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-13 14:07:11 +0000 |
commit | 63847496f14c813a5d80efd5b7de0f1294ffe1e3 (patch) | |
tree | 01c7571c7c762ceee70638549a99834fdd7c411b /test/fuzz3.test | |
parent | Initial commit. (diff) | |
download | sqlite3-63847496f14c813a5d80efd5b7de0f1294ffe1e3.tar.xz sqlite3-63847496f14c813a5d80efd5b7de0f1294ffe1e3.zip |
Adding upstream version 3.45.1.upstream/3.45.1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'test/fuzz3.test')
-rw-r--r-- | test/fuzz3.test | 175 |
1 files changed, 175 insertions, 0 deletions
diff --git a/test/fuzz3.test b/test/fuzz3.test new file mode 100644 index 0000000..bf778ed --- /dev/null +++ b/test/fuzz3.test @@ -0,0 +1,175 @@ +# 2007 May 10 +# +# The author disclaims copyright to this source code. In place of +# a legal notice, here is a blessing: +# +# May you do good and not evil. +# May you find forgiveness for yourself and forgive others. +# May you share freely, never taking more than you give. +# +#*********************************************************************** +# This file implements regression tests for SQLite library. The focus +# of this file is checking the libraries response to subtly corrupting +# the database file by changing the values of pseudo-randomly selected +# bytes. +# +# $Id: fuzz3.test,v 1.3 2009/01/05 17:19:03 drh Exp $ + +set testdir [file dirname $argv0] +source $testdir/tester.tcl + +# These tests deal with corrupt database files +# +database_may_be_corrupt +test_set_config_pagecache 0 0 + + +expr srand(123) + +proc rstring {n} { + set str s + while {[string length $str] < $n} { + append str [expr rand()] + } + return [string range $str 0 $n] +} + +# Return a randomly generated SQL literal. +# +proc rvalue {} { + switch -- [expr int(rand()*5)] { + 0 { # SQL NULL value. + return NULL + } + 1 { # Integer value. + return [expr int(rand()*1024)] + } + 2 { # Real value. + return [expr rand()] + } + 3 { # String value. + set n [expr int(rand()*2500)] + return "'[rstring $n]'" + } + 4 { # Blob value. + set n [expr int(rand()*2500)] + return "CAST('[rstring $n]' AS BLOB)" + } + } +} + +proc db_checksum {} { + set cksum [execsql { SELECT md5sum(a, b, c) FROM t1 }] + append cksum [execsql { SELECT md5sum(d, e, f) FROM t2 }] + set cksum +} + +# Modify a single byte in the file 'test.db' using tcl IO commands. The +# argument value, which must be an integer, determines both the offset of +# the byte that is modified, and the value that it is set to. The lower +# 8 bits of iMod determine the new byte value. The offset of the byte +# modified is the value of ($iMod >> 8). +# +# The return value is the iMod value required to restore the file +# to its original state. The command: +# +# modify_database [modify_database $x] +# +# leaves the file in the same state as it was in at the start of the +# command (assuming that the file is at least ($x>>8) bytes in size). +# +proc modify_database {iMod} { + set blob [binary format c [expr {$iMod&0xFF}]] + set offset [expr {$iMod>>8}] + + set fd [open test.db r+] + fconfigure $fd -encoding binary -translation binary + seek $fd $offset + set old_blob [read $fd 1] + seek $fd $offset + puts -nonewline $fd $blob + close $fd + + binary scan $old_blob c iOld + return [expr {($offset<<8) + ($iOld&0xFF)}] +} + +proc purge_pcache {} { + ifcapable !memorymanage { + db close + sqlite3 db test.db + } else { + sqlite3_release_memory 10000000 + } + if {[lindex [pcache_stats] 1] != 0} { + error "purge_pcache failed: [pcache_stats]" + } +} + +# This block creates a database to work with. +# +do_test fuzz3-1 { + execsql { + BEGIN; + CREATE TABLE t1(a, b, c); + CREATE TABLE t2(d, e, f); + CREATE INDEX i1 ON t1(a, b, c); + CREATE INDEX i2 ON t2(d, e, f); + } + for {set i 0} {$i < 50} {incr i} { + execsql "INSERT INTO t1 VALUES([rvalue], [rvalue], [rvalue])" + execsql "INSERT INTO t2 VALUES([rvalue], [rvalue], [rvalue])" + } + execsql COMMIT +} {} + +set ::cksum [db_checksum] +do_test fuzz3-2 { + db_checksum +} $::cksum + +for {set ii 0} {$ii < 5000} {incr ii} { + purge_pcache + + # Randomly modify a single byte of the database file somewhere within + # the first 100KB of the file. + set iNew [expr int(rand()*5*1024*256)] + set iOld [modify_database $iNew] + + set iTest 0 + foreach sql { + {SELECT * FROM t2 ORDER BY d} + {SELECT * FROM t1} + {SELECT * FROM t2} + {SELECT * FROM t1 ORDER BY a} + {SELECT * FROM t1 WHERE a = (SELECT a FROM t1 WHERE rowid=25)} + {SELECT * FROM t2 WHERE d = (SELECT d FROM t2 WHERE rowid=1)} + {SELECT * FROM t2 WHERE d = (SELECT d FROM t2 WHERE rowid=50)} + {PRAGMA integrity_check} + } { + do_test fuzz3-$ii.$iNew.[incr iTest] { + foreach {rc msg} [catchsql $sql] {} + if {$rc == 0 + || $msg eq "database or disk is full" + || $msg eq "database disk image is malformed" + || $msg eq "file is not a database" + || [string match "malformed database schema*" $msg] + } { + set msg ok + } + set msg + } {ok} + } + + # Restore the original database file content. Test that the correct + # checksum is now returned. + # + purge_pcache + modify_database $iOld + do_test fuzz3-$ii.$iNew.[incr iTest] { + db_checksum + } $::cksum +} + +test_restore_config_pagecache +finish_test |