FilesExpand file tree

master

/

cmark-fuzz.c

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

75 lines (62 loc) · 2.23 KB

master

/

cmark-fuzz.c

Copy path

Top

File metadata and controls

• Code
• Blame

75 lines (62 loc) · 2.23 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

/* for fmemopen */

#define _POSIX_C_SOURCE 200809L

#include <stdint.h>

#include <stdio.h>

#include <stdlib.h>

#include <string.h>

#include "cmark.h"

int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {

struct __attribute__((packed)) {

int options;

int width;

} fuzz_config;

if (size >= sizeof(fuzz_config)) {

/* The beginning of `data` is treated as fuzzer configuration */

memcpy(&fuzz_config, data, sizeof(fuzz_config));

int options = fuzz_config.options;

/* Mask off valid option bits */

options &= (CMARK_OPT_SOURCEPOS | CMARK_OPT_HARDBREAKS | CMARK_OPT_UNSAFE | CMARK_OPT_NOBREAKS | CMARK_OPT_NORMALIZE | CMARK_OPT_VALIDATE_UTF8 | CMARK_OPT_SMART);

/* Remainder of input is the markdown */

const char *markdown = (const char *)(data + sizeof(fuzz_config));

size_t markdown_size = size - sizeof(fuzz_config);

cmark_node *doc = NULL;

/* Use upper bits of options to select parsing mode */

switch (((unsigned) fuzz_config.options >> 30) & 3) {

case 0:

doc = cmark_parse_document(markdown, markdown_size, options);

break;

case 1:

if (markdown_size > 0) {

FILE *file = fmemopen((void *) markdown, markdown_size, "r");

doc = cmark_parse_file(file, options);

fclose(file);

}

break;

case 2: {

size_t block_max = 20;

cmark_parser *parser = cmark_parser_new(options);

while (markdown_size > 0) {

size_t block_size = markdown_size > block_max ? block_max : markdown_size;

cmark_parser_feed(parser, markdown, block_size);

markdown += block_size;

markdown_size -= block_size;

}

doc = cmark_parser_finish(parser);

cmark_parser_free(parser);

break;

}

case 3:

free(cmark_markdown_to_html(markdown, markdown_size, options));

break;

}

if (doc != NULL) {

free(cmark_render_commonmark(doc, options, fuzz_config.width));

free(cmark_render_html(doc, options));

free(cmark_render_latex(doc, options, fuzz_config.width));

free(cmark_render_man(doc, options, fuzz_config.width));

free(cmark_render_xml(doc, options));

cmark_node_free(doc);

}

}

return 0;

}