blob: 617968dfd40b1d52b9fa077904c8b6d9dda23252 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
#include "ndpi_api.h"
#include "fuzz_common_code.h"
#include <stdint.h>
#include <stdio.h>
#include "fuzzer/FuzzedDataProvider.h"
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
FuzzedDataProvider fuzzed_data(data, size);
u_int16_t i, num_iteration;
struct ndpi_hll hll;
/* Just to have some data */
if(fuzzed_data.remaining_bytes() < 2048)
return -1;
/* To allow memory allocation failures */
fuzz_set_alloc_callbacks_and_seed(size);
ndpi_hll_init(&hll, fuzzed_data.ConsumeIntegral<u_int16_t>());
num_iteration = fuzzed_data.ConsumeIntegral<u_int8_t>();
for (i = 0; i < num_iteration; i++)
ndpi_hll_add_number(&hll, fuzzed_data.ConsumeIntegral<u_int32_t>());
ndpi_hll_count(&hll);
ndpi_hll_reset(&hll);
num_iteration = fuzzed_data.ConsumeIntegral<u_int8_t>();
for (i = 0; i < num_iteration; i++) {
std::vector<int8_t>data = fuzzed_data.ConsumeBytes<int8_t>(fuzzed_data.ConsumeIntegral<u_int8_t>());
ndpi_hll_add(&hll, (char *)data.data(), data.size());
}
ndpi_hll_count(&hll);
ndpi_hll_destroy(&hll);
return 0;
}
|