1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
/* Unzcrash - A test program written to test robustness to
decompression of corrupted data.
Inspired by unzcrash.c from Julian Seward's bzip2.
Copyright (C) 2008, 2009, 2010 Antonio Diaz Diaz.
This program is free software: you have unlimited permission
to copy, distribute and modify it.
Usage is:
unzcrash "lzip -tv" filename.lz
This program reads the specified file and then repeatedly
decompresses it, increasing 256 times each byte of the compressed
data, so as to test all possible one-byte errors. This should not
cause any invalid memory accesses. If it does, please, report it as
a bug.
Compile this file with the command:
g++ -Wall -W -O2 -o unzcrash testsuite/unzcrash.cc
*/
#include <csignal>
#include <cstdio>
#include <cstdlib>
#include <stdint.h>
#include <unistd.h>
int main( const int argc, const char * const argv[] )
{
if( argc != 3 )
{
std::fprintf( stderr, "Usage: unzcrash \"lzip -tv\" filename.lz\n" );
return 1;
}
FILE *f = std::fopen( argv[2], "rb" );
if( !f )
{
std::fprintf( stderr, "Can't open file `%s' for reading\n", argv[2] );
return 1;
}
const int buffer_size = 1 << 21;
uint8_t * const buffer = new uint8_t[buffer_size];
const int size = std::fread( buffer, 1, buffer_size, f );
if( size >= buffer_size )
{
std::fprintf( stderr, "input file `%s' too big.\n", argv[2] );
return 1;
}
std::fclose( f );
f = popen( argv[1], "w" );
if( !f )
{
std::fprintf( stderr, "incorrect parameters or too many files.\n" );
return 1;
}
const int wr = std::fwrite( buffer, 1, size, f );
if( wr != size || pclose( f ) != 0 )
{
std::fprintf( stderr, "Could not run `%s' or other error.\n", argv[1] );
return 1;
}
std::signal( SIGPIPE, SIG_IGN );
for( int byte = 0; byte < size; ++byte )
{
std::fprintf( stderr, "byte %d\n", byte );
for( int i = 0; i < 255; ++i )
{
++buffer[byte];
f = popen( argv[1], "w" );
if( !f )
{ std::fprintf( stderr, "Can't open pipe.\n" ); return 1; }
std::fwrite( buffer, 1, size, f );
pclose( f );
}
++buffer[byte];
}
delete[] buffer;
return 0;
}
|
