1 files changed, 38 insertions, 0 deletions
diff --git a/fuzz/fuzz_alg_jitter.cpp b/fuzz/fuzz_alg_jitter.cpp
new file mode 100644
index 000000000..8fb4d85db
--- /dev/null
+++ b/fuzz/fuzz_alg_jitter.cpp
@@ -0,0 +1,38 @@
+#include "ndpi_api.h"
+#include "fuzz_common_code.h"
+
+#include <stdint.h>
+#include <stdio.h>
+#include "fuzzer/FuzzedDataProvider.h"
+
+struct ndpi_detection_module_struct *ndpi_info_mod = NULL;
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+  FuzzedDataProvider fuzzed_data(data, size);
+  u_int16_t i, num_iteration, num_learning_values;
+  struct ndpi_jitter_struct s;
+  int rc;
+
+  /* Just to have some data */
+  if(fuzzed_data.remaining_bytes() < 1024)
+    return -1;
+
+  /* We don't really need the detection module, but this way we can enable
+     memory allocation failures */
+  if (ndpi_info_mod == NULL) {
+    fuzz_init_detection_module(&ndpi_info_mod, 0);
+  }
+
+  num_learning_values = fuzzed_data.ConsumeIntegral<u_int16_t>();
+  rc = ndpi_jitter_init(&s, num_learning_values);
+
+  if (rc == 0) {
+    num_iteration = fuzzed_data.ConsumeIntegral<u_int8_t>();
+    for (i = 0; i < num_iteration; i++)
+      ndpi_jitter_add_value(&s, fuzzed_data.ConsumeFloatingPoint<float>());
+
+    ndpi_jitter_free(&s);
+  }
+
+  return 0;
+}