disassembler_dex_fuzzer.cc 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354
  1. // Copyright 2018 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include <stddef.h>
  5. #include <stdint.h>
  6. #include "base/logging.h"
  7. #include "components/zucchini/buffer_view.h"
  8. #include "components/zucchini/disassembler.h"
  9. #include "components/zucchini/disassembler_dex.h"
  10. namespace {
  11. struct Environment {
  12. Environment() { logging::SetMinLogLevel(logging::LOG_FATAL); }
  13. };
  14. } // namespace
  15. extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  16. static Environment env;
  17. if (!size)
  18. return 0;
  19. // Prepare data.
  20. std::vector<uint8_t> mutable_data(data, data + size);
  21. zucchini::ConstBufferView image(mutable_data.data(), mutable_data.size());
  22. // Create disassembler. Early exit on failure.
  23. auto disassembler_dex =
  24. zucchini::Disassembler::Make<zucchini::DisassemblerDex>(image);
  25. if (!disassembler_dex)
  26. return 0;
  27. CHECK_LE(disassembler_dex->size(), image.size());
  28. zucchini::MutableBufferView mutable_image(mutable_data.data(),
  29. disassembler_dex->size());
  30. std::vector<zucchini::Reference> references;
  31. // Read all references in the file.
  32. auto groups = disassembler_dex->MakeReferenceGroups();
  33. for (const auto& group : groups) {
  34. auto reader = group.GetReader(disassembler_dex.get());
  35. for (auto ref = reader->GetNext(); ref.has_value();
  36. ref = reader->GetNext()) {
  37. references.push_back(ref.value());
  38. }
  39. reader.reset();
  40. auto writer = group.GetWriter(mutable_image, disassembler_dex.get());
  41. for (const auto& ref : references)
  42. writer->PutNext(ref);
  43. references.clear();
  44. }
  45. return 0;
  46. }