harfbuzz/test/fuzzing/hb-set-fuzzer.cc

82 lines
1.7 KiB
C++
Raw Normal View History

#include "hb-fuzzer.hh"
#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <assert.h>
#include "hb.h"
enum set_operation_t : uint8_t
{
INTERSECT = 0,
UNION = 1,
SUBTRACT = 2,
SYMMETRIC_DIFFERENCE = 3
};
struct instructions_t
{
set_operation_t operation;
uint32_t first_set_size;
};
2020-02-12 16:55:10 +01:00
static hb_set_t *create_set (const uint32_t *value_array, int count)
{
2020-02-12 16:55:10 +01:00
hb_set_t *set = hb_set_create ();
for (int i = 0; i < count; i++)
hb_set_add (set, value_array[i]);
return set;
}
extern "C" int LLVMFuzzerTestOneInput (const uint8_t *data, size_t size)
{
2020-07-14 16:59:58 +02:00
alloc_state = size; /* see src/failing-alloc.c */
if (size < sizeof (instructions_t))
return 0;
#pragma GCC diagnostic push
#pragma GCC diagnostic ignored "-Wstrict-aliasing"
2020-02-12 16:55:10 +01:00
const instructions_t &instructions = reinterpret_cast<const instructions_t &> (data);
#pragma GCC diagnostic pop
data += sizeof (instructions_t);
size -= sizeof (instructions_t);
2020-02-12 16:55:10 +01:00
const uint32_t *values = reinterpret_cast<const uint32_t *> (data);
size = size / sizeof (uint32_t);
2020-02-12 16:55:10 +01:00
if (size < instructions.first_set_size)
return 0;
2020-02-12 16:55:10 +01:00
hb_set_t *set_a = create_set (values, instructions.first_set_size);
2020-02-12 16:55:10 +01:00
values += instructions.first_set_size;
size -= instructions.first_set_size;
hb_set_t *set_b = create_set (values, size);
2020-02-12 16:55:10 +01:00
switch (instructions.operation)
{
2020-02-12 16:55:10 +01:00
case INTERSECT:
hb_set_intersect (set_a, set_b);
break;
case UNION:
hb_set_union (set_a, set_b);
break;
case SUBTRACT:
hb_set_subtract (set_a, set_b);
break;
case SYMMETRIC_DIFFERENCE:
hb_set_symmetric_difference (set_a, set_b);
break;
default:
break;
}
hb_set_destroy (set_a);
hb_set_destroy (set_b);
return 0;
}