1 // Copyright 2017 Google Inc. All rights reserved. 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // http://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 #include <cmath> 16 #include <iostream> 17 18 #include "examples/libfuzzer/libfuzzer_example.pb.h" 19 #include "port/protobuf.h" 20 #include "src/libfuzzer/libfuzzer_macro.h" 21 22 protobuf_mutator::protobuf::LogSilencer log_silincer; 23 24 protobuf_mutator::libfuzzer::PostProcessorRegistration<libfuzzer_example::Msg> __anon1e23a97e0102() 25 reg = {[](libfuzzer_example::Msg* message, unsigned int seed) { 26 message->set_optional_uint64( 27 std::hash<std::string>{}(message->optional_string())); 28 29 if (message->has_any()) { 30 auto* any = message->mutable_any(); 31 32 // Guide mutator to usefull 'Any' types. 33 static const char* const expected_types[] = { 34 "type.googleapis.com/google.protobuf.DescriptorProto", 35 "type.googleapis.com/google.protobuf.FileDescriptorProto", 36 }; 37 38 if (!std::count(std::begin(expected_types), std::end(expected_types), 39 any->type_url())) { 40 const size_t num = 41 (std::end(expected_types) - std::begin(expected_types)); 42 any->set_type_url(expected_types[seed % num]); 43 } 44 } 45 }}; 46 DEFINE_PROTO_FUZZER(const libfuzzer_example::Msg & message)47DEFINE_PROTO_FUZZER(const libfuzzer_example::Msg& message) { 48 protobuf_mutator::protobuf::FileDescriptorProto file; 49 50 // Emulate a bug. 51 if (message.optional_uint64() == 52 std::hash<std::string>{}(message.optional_string()) && 53 message.optional_string() == "abcdefghijklmnopqrstuvwxyz" && 54 !std::isnan(message.optional_float()) && 55 std::fabs(message.optional_float()) > 1000 && 56 message.any().UnpackTo(&file) && !file.name().empty()) { 57 std::cerr << message.DebugString() << "\n"; 58 abort(); 59 } 60 } 61