harfbuzz/test/fuzzing
Garret Rieger 918193ebf9 [subset] fix a class of fuzzer timeouts caused by large shared coverage tables.
More acurately estimates the op count for CoverageFormat2 tables as the population size instead of the size in bytes.
2023-02-22 16:57:39 -07:00
..
fonts [subset] fix a class of fuzzer timeouts caused by large shared coverage tables. 2023-02-22 16:57:39 -07:00
graphs [repacker] check duplicate() for success. 2023-01-23 18:37:13 -07:00
sets
Makefile.am test/fuzzing: Fix dist 2022-12-22 06:44:04 -07:00
README.md Update test/fuzzing/README 2022-08-03 11:31:34 -06:00
hb-draw-fuzzer.cc More s/hb_font_get_glyph_shape/hb_font_draw_glyph/ 2022-12-23 13:37:59 -07:00
hb-fuzzer.hh [fuzzer] In 50% of runs don't fail the allocator 2022-07-01 15:25:09 -06:00
hb-repacker-fuzzer.cc [repacker] use memcpy to avoid alignment issues. 2022-12-05 14:13:47 -07:00
hb-set-fuzzer.cc [fuzzer] In 50% of runs don't fail the allocator 2022-07-01 15:25:09 -06:00
hb-shape-fuzzer.cc [fuzzer] In 50% of runs don't fail the allocator 2022-07-01 15:25:09 -06:00
hb-subset-fuzzer.cc [fuzzer] In 50% of runs don't fail the allocator 2022-07-01 15:25:09 -06:00
main.cc [blob] Add failing versions of create API 2021-06-15 13:56:30 -06:00
meson.build [repacker] only build repacker fuzzer when experimental api is enabled. 2022-12-02 00:02:14 +00:00
run-draw-fuzzer-tests.py [test] Remove timeout from test runners 2020-10-15 00:49:02 -07:00
run-repacker-fuzzer-tests.py [repacker] add test for repacker fuzzer. 2022-12-01 20:17:40 +00:00
run-shape-fuzzer-tests.py [test] Remove timeout from test runners 2020-10-15 00:49:02 -07:00
run-subset-fuzzer-tests.py [test] Remove timeout from test runners 2020-10-15 00:49:02 -07:00

README.md

To build the fuzzers with libFuzzer to perform actual fuzzing, build with:

CXX=clang++ CXXFLAGS="-fsanitize=address,fuzzer-no-link" meson fuzzbuild --default-library=static -Dfuzzer_ldflags="-fsanitize=address,fuzzer"

ninja -Cfuzzbuild

Then, run the fuzzer like this:

fuzzbuild/test/fuzzing/hb-{shape,draw,subset,set}-fuzzer [-max_len=2048] [CORPUS_DIR]

Where max_len specifies the maximal length of font files to handle. The smaller the faster.

For more details consult the following locations: