/* * Copyright (c) 2017-2024 Free Software Foundation, Inc. * * This file is part of GNU Wget. * * GNU Wget is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * GNU Wget is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with Wget. If not, see . */ #include #include #include // opendir, readdir #include // uint8_t #include // fmemopen #include // strncmp #include // open flags #include // close #include // longjmp, setjmp #include // longjmp, setjmp #ifdef __cplusplus extern "C" { #endif // declarations for wget internal functions int main_wget(int argc, const char **argv); void cleanup(void); FILE *fopen_wget(const char *pathname, const char *mode); FILE *fopen_wgetrc(const char *pathname, const char *mode); void exit_wget(int status); #ifdef __cplusplus } #endif #include "fuzzer.h" static const uint8_t *g_data; static size_t g_size; FILE *fopen_wget(const char *pathname, const char *mode) { return fopen("/dev/null", mode); } FILE *fopen_wgetrc(const char *pathname, const char *mode) { #ifdef HAVE_FMEMOPEN return fmemopen((void *) g_data, g_size, mode); #else return NULL; #endif } static bool fuzzing; static jmp_buf jmpbuf; #ifdef FUZZING void exit_wget(int status) { longjmp(jmpbuf, 1); } #endif #if defined HAVE_DLFCN_H #include // dlsym #include #include #include #if defined __OpenBSD__ || defined __FreeBSD__ #include #endif #ifndef RTLD_NEXT #define RTLD_NEXT RTLD_GLOBAL #endif void exit(int status) { if (fuzzing) { longjmp(jmpbuf, 1); } else { void (*libc_exit)(int) = (void(*)(int)) dlsym (RTLD_NEXT, "exit"); libc_exit(status); } } int getaddrinfo(const char *node, const char *service, const struct addrinfo *hints, struct addrinfo **res) { if (fuzzing) { return -1; } int(*libc_getaddrinfo)(const char *, const char *, const struct addrinfo *, struct addrinfo **) = (int(*)(const char *, const char *, const struct addrinfo *, struct addrinfo **)) dlsym (RTLD_NEXT, "getaddrinfo"); return libc_getaddrinfo(node, service, hints, res); } #endif int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { static const char *argv[] = { "wget", "-q" }; if (size > 2048) // same as max_len = ... in .options file return 0; g_data = data; g_size = size; CLOSE_STDERR fuzzing = true; if (setjmp(jmpbuf)) { cleanup(); goto done; } main_wget(sizeof(argv)/sizeof(argv[0]), argv); done: fuzzing = false; RESTORE_STDERR return 0; }