diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:25:44 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:25:44 +0000 |
commit | b3925d944ed94cc76bbcbb14a799ec9beeb8d1bf (patch) | |
tree | a5e5ccdbc84294390695b5ae3a8c89cc16e6cbae /fuzz/wget_url_fuzzer.c | |
parent | Initial commit. (diff) | |
download | wget-b3925d944ed94cc76bbcbb14a799ec9beeb8d1bf.tar.xz wget-b3925d944ed94cc76bbcbb14a799ec9beeb8d1bf.zip |
Adding upstream version 1.21.4.upstream/1.21.4
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'fuzz/wget_url_fuzzer.c')
-rw-r--r-- | fuzz/wget_url_fuzzer.c | 105 |
1 files changed, 105 insertions, 0 deletions
diff --git a/fuzz/wget_url_fuzzer.c b/fuzz/wget_url_fuzzer.c new file mode 100644 index 0000000..d5a5534 --- /dev/null +++ b/fuzz/wget_url_fuzzer.c @@ -0,0 +1,105 @@ +/* + * Copyright (c) 2017-2023 Free Software Foundation, Inc. + * + * This file is part of GNU Wget. + * + * GNU Wget is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * GNU Wget is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with Wget. If not, see <https://www.gnu.org/licenses/>. + */ + +#include <config.h> + +#include <sys/types.h> +#include <stdint.h> // uint8_t +#include <stdio.h> // fmemopen +#include <string.h> // strncmp +#include <stdlib.h> // free +#include <unistd.h> // close +#include <fcntl.h> // open flags +#include <unistd.h> // close + +#include "wget.h" +#undef fopen_wgetrc + +#ifdef __cplusplus + extern "C" { +#endif + #include "url.h" + + // declarations for wget internal functions + int main_wget(int argc, const char **argv); + void cleanup(void); + FILE *fopen_wget(const char *pathname, const char *mode); + FILE *fopen_wgetrc(const char *pathname, const char *mode); + void exit_wget(int status); +#ifdef __cplusplus + } +#endif + +#include "fuzzer.h" + +FILE *fopen_wget(const char *pathname, const char *mode) +{ + return fopen("/dev/null", mode); +} + +FILE *fopen_wgetrc(const char *pathname, const char *mode) +{ + return NULL; +} + +#ifdef FUZZING +void exit_wget(int status) +{ +} +#endif + +int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) +{ + struct url *url; + struct iri iri; + char *in; + + if (size > 4096) // same as max_len = ... in .options file + return 0; + + CLOSE_STDERR + + in = (char *) malloc(size + 1); + memcpy(in, data, size); + in[size] = 0; + + iri.uri_encoding = (char *) "iso-8859-1"; + iri.orig_url = NULL; + + iri.utf8_encode = 0; + url = url_parse(in, NULL, &iri, 0); + url_free(url); + + url = url_parse(in, NULL, &iri, 1); + url_free(url); + + iri.utf8_encode = 1; + url = url_parse(in, NULL, &iri, 0); + url_free(url); + + url = url_parse(in, NULL, &iri, 1); + url_free(url); + + free(iri.orig_url); + free(in); + + RESTORE_STDERR + + return 0; +} |