harfbuzz

History

Christoph Reiter 03bd6ead44 [meson] Only pass required dependencies to everything Instead of passing dependencies as required we used one giant shared dependency list containing all dependencies for every library/executable. While this kinda works, the specified deps are also used for generating the pkg-config files and this leads to lots of Requires.private and Libs.private entries which aren't really needed. This removes the "deps" array and replaces it with a few smaller ones and makes sure the public libraries only get passed the dependencies actually needed. Fixes #2441		2020-06-04 23:28:57 +04:30
..
fonts	Fix bug	2020-04-21 16:51:55 -07:00
sets	[fuzz] minor, move two fuzzer cases to their correct place	2020-02-12 19:17:18 +03:30
Makefile.am	Remove cmake testing and add meson build bot	2020-03-11 20:15:10 +03:30
README	Move all references of old url to the new address (#622 )	2017-11-20 14:49:22 -05:00
hb-draw-fuzzer.cc	[tests] Enable more gid misc calls on draw fuzzer	2020-05-21 07:00:40 +04:30
hb-fuzzer.hh	[fuzzer] Separate main() into a new file	2016-12-20 20:50:38 -06:00
hb-set-fuzzer.cc	[fuzz] minor style fixes	2020-02-12 19:30:31 +03:30
hb-shape-fuzzer.cc	[fuzz] Avoid empty memcpy and ubsan complain by length checking before memcpy	2020-03-03 21:39:22 +03:30
hb-subset-fuzzer.cc	[fuzz] Don't fail when blob is empty	2019-07-11 14:31:55 +04:30
main.cc	[fuzz] minor don't abort main.cc when the file was empty or not found	2020-02-26 16:15:17 +03:30
meson.build	[meson] Only pass required dependencies to everything	2020-06-04 23:28:57 +04:30
run-draw-fuzzer-tests.py	minor, use sys.exit print shorthand	2020-05-28 23:34:37 +04:30
run-shape-fuzzer-tests.py	minor, use sys.exit print shorthand	2020-05-28 23:34:37 +04:30
run-subset-fuzzer-tests.py	minor, use sys.exit print shorthand	2020-05-28 23:34:37 +04:30

README

In order to build the fuzzer one needs to build HarfBuzz and
harfbuzz/test/fuzzing/hb-fuzzer.cc with:
  - Using the most recent Clang
  - With -fsanitize=address (or =undefined, or a combination)
  - With -fsanitize-coverage=edge[,8bit-counters,trace-cmp]
  - With various defines that limit worst case exponential behavior.
    See FUZZING_CPPFLAGS in harfbuzz/src/Makefile.am for the list.
  - link against libFuzzer

To run the fuzzer one needs to first obtain a test corpus as a directory
containing interesting fonts.  A good starting point is inside
harfbuzz/test/shaping/fonts/fonts/.
Then, run the fuzzer like this:
   ./hb-fuzzer -max_len=2048 CORPUS_DIR
Where max_len specifies the maximal length of font files to handle.
The smaller the faster.

For more details consult the following locations:
  - http://llvm.org/docs/LibFuzzer.html or
  - https://github.com/google/libfuzzer-bot/tree/master/harfbuzz
  - https://github.com/harfbuzz/harfbuzz/issues/139