kc3-lang/libxml2/fuzz/schema.c

• Show log

  Commit

• Hash : 780e432a
  Author :
  Date : 2024-06-11T16:58:09
  

  fuzz: Move to per-context error handler
  

Download

• fuzz/schema.c

• /*
   * schema.c: a libFuzzer target to test the XML Schema processor.
   *
   * See Copyright for the status of this software.
   */
  
  #include <libxml/catalog.h>
  #include <libxml/xmlschemas.h>
  #include "fuzz.h"
  
  int
  LLVMFuzzerInitialize(int *argc ATTRIBUTE_UNUSED,
                       char ***argv ATTRIBUTE_UNUSED) {
      xmlFuzzMemSetup();
      xmlInitParser();
  #ifdef LIBXML_CATALOG_ENABLED
      xmlInitializeCatalog();
      xmlCatalogSetDefaults(XML_CATA_ALLOW_NONE);
  #endif
  
      return 0;
  }
  
  int
  LLVMFuzzerTestOneInput(const char *data, size_t size) {
      xmlSchemaParserCtxtPtr pctxt;
      size_t maxAlloc;
  
      if (size > 50000)
          return(0);
  
      maxAlloc = xmlFuzzReadInt(4) % (size + 100);
  
      xmlFuzzDataInit(data, size);
      xmlFuzzReadEntities();
  
      xmlFuzzMemSetLimit(maxAlloc);
      pctxt = xmlSchemaNewParserCtxt(xmlFuzzMainUrl());
      xmlSchemaSetParserStructuredErrors(pctxt, xmlFuzzSErrorFunc, NULL);
      xmlSchemaSetResourceLoader(pctxt, xmlFuzzResourceLoader, NULL);
      xmlSchemaFree(xmlSchemaParse(pctxt));
      xmlSchemaFreeParserCtxt(pctxt);
  
      xmlFuzzMemSetLimit(0);
      xmlFuzzDataCleanup();
      xmlResetLastError();
  
      return(0);
  }
  
  

Download