1 // Copyright 2017 Google Inc. All rights reserved.
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 //     http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 
15 #include <cmath>
16 #include <iostream>
17 
18 #include "examples/libfuzzer/libfuzzer_example.pb.h"
19 #include "port/protobuf.h"
20 #include "src/libfuzzer/libfuzzer_macro.h"
21 
22 protobuf_mutator::protobuf::LogSilencer log_silincer;
23 
24 protobuf_mutator::libfuzzer::PostProcessorRegistration<libfuzzer_example::Msg>
__anon95debcef0102() 25     reg = {[](libfuzzer_example::Msg* message, unsigned int seed) {
26       message->set_optional_uint64(
27           std::hash<std::string>{}(message->optional_string()));
28 
29       if (message->has_any()) {
30         auto* any = message->mutable_any();
31 
32         // Guide mutator to usefull 'Any' types.
33         static const char* const expected_types[] = {
34             "type.googleapis.com/google.protobuf.DescriptorProto",
35             "type.googleapis.com/google.protobuf.FileDescriptorProto",
36         };
37 
38         if (!std::count(std::begin(expected_types), std::end(expected_types),
39                         any->type_url())) {
40           const size_t num =
41               (std::end(expected_types) - std::begin(expected_types));
42           any->set_type_url(expected_types[seed % num]);
43         }
44       }
45     }};
46 
DEFINE_BINARY_PROTO_FUZZER(const libfuzzer_example::Msg & message)47 DEFINE_BINARY_PROTO_FUZZER(const libfuzzer_example::Msg& message) {
48   protobuf_mutator::protobuf::FileDescriptorProto file;
49 
50   // Emulate a bug.
51   if (message.optional_uint64() ==
52           std::hash<std::string>{}(message.optional_string()) &&
53       message.optional_string() == "abcdefghijklmnopqrstuvwxyz" &&
54       !std::isnan(message.optional_float()) &&
55       std::fabs(message.optional_float()) > 1000 &&
56       message.any().UnpackTo(&file) && !file.name().empty()) {
57     std::cerr << message.DebugString() << "\n";
58     abort();
59   }
60 }
61