FuzzingInterface.h

Enable keyboard shortcuts

/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */

/* This Source Code Form is subject to the terms of the Mozilla Public

 * License, v. 2.0. If a copy of the MPL was not distributed with this

 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

/*

 * Interface definitions for the unified fuzzing interface

*/

#ifndef FuzzingInterface_h__

#define FuzzingInterface_h__

#include <fstream>

#ifdef LIBFUZZER

#  include "FuzzerExtFunctions.h"

#endif

#include "FuzzerRegistry.h"

#include "mozilla/Assertions.h"

#ifndef JS_STANDALONE

#  include "mozilla/Logging.h"

#endif

namespace mozilla {

#ifdef JS_STANDALONE

void fuzzing_log(const char* aFmt, ...);

#  define MOZ_LOG_EXPAND_ARGS(...) __VA_ARGS__

#  define FUZZING_LOG(args) fuzzing_log(MOZ_LOG_EXPAND_ARGS args);

#else

extern LazyLogModule gFuzzingLog;

#  define FUZZING_LOG(args) \

    MOZ_LOG(mozilla::gFuzzingLog, mozilla::LogLevel::Verbose, args)

#endif  // JS_STANDALONE

typedef int (*FuzzingTestFuncRaw)(const uint8_t*, size_t);

#ifdef AFLFUZZ

static int afl_interface_raw(const char* testFile,

                             FuzzingTestFuncRaw testFunc) {

  char* buf = NULL;

  while (__AFL_LOOP(1000)) {

    std::ifstream is;

    is.open(testFile, std::ios::binary);

    is.seekg(0, std::ios::end);

    int len = is.tellg();

    is.seekg(0, std::ios::beg);

    MOZ_RELEASE_ASSERT(len >= 0);

    if (!len) {

      is.close();

      continue;

    buf = (char*)realloc(buf, len);

    MOZ_RELEASE_ASSERT(buf);

    is.read(buf, len);

    is.close();

    testFunc((uint8_t*)buf, (size_t)len);

  free(buf);

  return 0;

#  define MOZ_AFL_INTERFACE_COMMON()                                      \

    char* testFilePtr = getenv("MOZ_FUZZ_TESTFILE");                      \

    if (!testFilePtr) {                                                   \

      fprintf(stderr,                                                     \

              "Must specify testfile in MOZ_FUZZ_TESTFILE environment "   \

              "variable.\n");                                             \

      return 1;                                                           \

    }                                                                     \

    /* Make a copy of testFilePtr so the testing function can safely call \

     * getenv                                                             \

     */                                                                   \

    std::string testFile(testFilePtr);

#  define MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName)          \

    static int afl_fuzz_##moduleName(const uint8_t* data, size_t size) { \

      MOZ_RELEASE_ASSERT(data == NULL && size == 0);                     \

      MOZ_AFL_INTERFACE_COMMON();                                        \

      return ::mozilla::afl_interface_raw(testFile.c_str(), testFunc);   \

    }                                                                    \

    static void __attribute__((constructor)) AFLRegister##moduleName() { \

      ::mozilla::FuzzerRegistry::getInstance().registerModule(           \

          #moduleName, initFunc, afl_fuzz_##moduleName);                 \

#else

#  define MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName) /* Nothing */

#endif                                                          // AFLFUZZ

#ifdef LIBFUZZER

#  define MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, moduleName)          \

    static void __attribute__((constructor)) LibFuzzerRegister##moduleName() { \

      ::mozilla::FuzzerRegistry::getInstance().registerModule(                 \

          #moduleName, initFunc, testFunc);                                    \

#else

#  define MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, \

                                      moduleName) /* Nothing */

#endif

#define MOZ_FUZZING_INTERFACE_RAW(initFunc, testFunc, moduleName) \

  MOZ_LIBFUZZER_INTERFACE_RAW(initFunc, testFunc, moduleName);    \

  MOZ_AFL_INTERFACE_RAW(initFunc, testFunc, moduleName);

}  // namespace mozilla

#endif  // FuzzingInterface_h__