Skip to content

Commit ecd6d8e

Browse files
committed
added fuzzing client
1 parent 00a131e commit ecd6d8e

File tree

2 files changed

+85
-4
lines changed

2 files changed

+85
-4
lines changed

Makefile

Lines changed: 15 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,21 +12,32 @@ test.o: CPPFLAGS += $(TEST_CPPFLAGS)
1212
test.o: CXXFLAGS += -Wno-multichar
1313

1414
%.o: %.cpp simplecpp.h
15-
$(CXX) $(CPPFLAGS) $(CXXFLAGS) -c $<
15+
$(CXX) $(CPPFLAGS) $(CXXFLAGS) -c $< $(LIB_FUZZING_ENGINE)
16+
17+
fuzz_no.o: fuzz.cpp
18+
$(CXX) $(CPPFLAGS) $(CXXFLAGS) -DNO_FUZZ -c -o $@ $^
1619

1720
testrunner: test.o simplecpp.o
18-
$(CXX) $(LDFLAGS) simplecpp.o test.o -o testrunner
21+
$(CXX) $(LDFLAGS) -o $@ $^
1922

2023
test: testrunner simplecpp
2124
./testrunner
2225
python3 run-tests.py
2326
python3 -m pytest integration_test.py -vv
2427

28+
fuzz: fuzz.o simplecpp.o
29+
# TODO: use -stdlib=libc++ -lc++
30+
# make fuzz CXX=clang++ CXXOPTS="-O2 -fno-omit-frame-pointer -g -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=address,undefined -fsanitize-address-use-after-scope -fno-sanitize=integer -fno-sanitize-recover=undefined" LIB_FUZZING_ENGINE="-fsanitize=fuzzer"
31+
$(CXX) $(LDFLAGS) $(CXXFLAGS) -o $@ $^ $(LIB_FUZZING_ENGINE)
32+
33+
no-fuzz: fuzz_no.o simplecpp.o
34+
$(CXX) $(LDFLAGS) $(CXXFLAGS) -o $@ $^
35+
2536
selfcheck: simplecpp
2637
CXX=$(CXX) ./selfcheck.sh
2738

2839
simplecpp: main.o simplecpp.o
29-
$(CXX) $(LDFLAGS) main.o simplecpp.o -o simplecpp
40+
$(CXX) $(LDFLAGS) -o $@ $^
3041

3142
clean:
32-
rm -f testrunner simplecpp *.o
43+
rm -f testrunner fuzz no-fuzz simplecpp *.o

fuzz.cpp

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,70 @@
1+
/*
2+
* simplecpp - A simple and high-fidelity C/C++ preprocessor library
3+
* Copyright (C) 2016-2024 simplecpp team
4+
*/
5+
6+
#include "simplecpp.h"
7+
8+
#include <cstdint>
9+
10+
#ifdef NO_FUZZ
11+
#include <cstdlib>
12+
#include <fstream>
13+
#include <sstream>
14+
#include <string>
15+
#endif
16+
17+
/*
18+
0 - store in corpus
19+
-1 - omit from corpus
20+
*/
21+
static int doProcess(const uint8_t *data, size_t dataSize)
22+
{
23+
simplecpp::OutputList outputList;
24+
std::vector<std::string> files;
25+
simplecpp::TokenList rawtokens(data, dataSize, files, "test.cpp", &outputList);
26+
27+
simplecpp::TokenList outputTokens(files);
28+
simplecpp::FileDataCache filedata;
29+
const simplecpp::DUI dui;
30+
std::list<simplecpp::MacroUsage> macroUsage;
31+
std::list<simplecpp::IfCond> ifCond;
32+
simplecpp::preprocess(outputTokens, rawtokens, files, filedata, dui, &outputList, &macroUsage, &ifCond);
33+
34+
simplecpp::cleanup(filedata);
35+
36+
return 0;
37+
}
38+
39+
#ifndef NO_FUZZ
40+
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t dataSize);
41+
42+
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t dataSize)
43+
{
44+
return doProcess(data, dataSize);
45+
}
46+
#else
47+
int main(int argc, char * argv[])
48+
{
49+
if (argc < 2 || argc > 3)
50+
return EXIT_FAILURE;
51+
52+
std::ifstream f(argv[1]);
53+
if (!f.is_open())
54+
return EXIT_FAILURE;
55+
56+
std::ostringstream oss;
57+
oss << f.rdbuf();
58+
59+
if (!f.good())
60+
return EXIT_FAILURE;
61+
62+
const int cnt = (argc == 3) ? std::stoi(argv[2]) : 1;
63+
64+
const std::string code = oss.str();
65+
for (int i = 0; i < cnt; ++i)
66+
doProcess(reinterpret_cast<const uint8_t*>(code.data()), code.size());
67+
68+
return EXIT_SUCCESS;
69+
}
70+
#endif

0 commit comments

Comments
 (0)