pugixml/tests/fuzz_parse.cpp

#include "../src/pugixml.hpp"

#include <stdint.h>

extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)
{
    pugi::xml_document doc;

	doc.load_buffer(Data, Size);
	doc.load_buffer(Data, Size, pugi::parse_minimal);
	doc.load_buffer(Data, Size, pugi::parse_full);

	return 0;
}
tests: Add support for afl-fuzz With the current setup it successfully finds the (fixed) DOCTYPE buffer overrun in ~50 minutes (on a single core). 2015-03-13 00:18:30 -07:00			`#include "../src/pugixml.hpp"`

fuzz: Use libFuzzer instead of afl-fuzz This allows us to have faster fuzz cycles since the fuzzer is in-process. 2017-02-07 23:34:39 -08:00			`#include <stdint.h>`
tests: Add support for afl-fuzz With the current setup it successfully finds the (fixed) DOCTYPE buffer overrun in ~50 minutes (on a single core). 2015-03-13 00:18:30 -07:00
fuzz: Use libFuzzer instead of afl-fuzz This allows us to have faster fuzz cycles since the fuzzer is in-process. 2017-02-07 23:34:39 -08:00			`extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)`
			`{`
tests: Add support for afl-fuzz With the current setup it successfully finds the (fixed) DOCTYPE buffer overrun in ~50 minutes (on a single core). 2015-03-13 00:18:30 -07:00			`pugi::xml_document doc;`

fuzz: Use libFuzzer instead of afl-fuzz This allows us to have faster fuzz cycles since the fuzzer is in-process. 2017-02-07 23:34:39 -08:00			`doc.load_buffer(Data, Size);`
			`doc.load_buffer(Data, Size, pugi::parse_minimal);`
			`doc.load_buffer(Data, Size, pugi::parse_full);`

			`return 0;`
tests: Add support for afl-fuzz With the current setup it successfully finds the (fixed) DOCTYPE buffer overrun in ~50 minutes (on a single core). 2015-03-13 00:18:30 -07:00			`}`