1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
/* SPDX-License-Identifier: LGPL-2.1-or-later */
#include <linux/sockios.h>
#include <sys/ioctl.h>
#include <unistd.h>
#include "fd-util.h"
#include "fuzz.h"
#include "fuzz-journald.h"
#include "journald-stream.h"
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
_cleanup_close_pair_ int stream_fds[2] = EBADF_PAIR;
_cleanup_(server_freep) Server *s = NULL;
StdoutStream *stream;
int v, fd0;
if (outside_size_range(size, 1, 65536))
return 0;
fuzz_setup_logging();
assert_se(socketpair(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0, stream_fds) >= 0);
assert_se(server_new(&s) >= 0);
dummy_server_init(s, NULL, 0);
assert_se(stdout_stream_install(s, stream_fds[0], &stream) >= 0);
fd0 = TAKE_FD(stream_fds[0]); /* avoid double close */
assert_se(write(stream_fds[1], data, size) == (ssize_t) size);
while (ioctl(fd0, SIOCINQ, &v) == 0 && v)
sd_event_run(s->event, UINT64_MAX);
if (s->n_stdout_streams > 0)
stdout_stream_destroy(stream);
return 0;
}
|
