OLD | NEW |
---|---|
(Empty) | |
1 // Copyright 2016 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include <stddef.h> | |
6 #include <stdint.h> | |
7 | |
8 #include <random> | |
9 #include <string> | |
10 | |
11 #include "components/search_engines/search_terms_data.h" | |
12 #include "components/search_engines/template_url_parser.h" | |
13 | |
14 class PseudoRandomFilter : public TemplateURLParser::ParameterFilter { | |
15 public: | |
16 PseudoRandomFilter(uint32_t seed) | |
17 : generator_(seed) | |
18 , bool_pool_(0, 1) {} | |
19 ~PseudoRandomFilter() override = default; | |
20 | |
21 bool KeepParameter(const std::string&, const std::string&) override { | |
22 return bool_pool_(generator_); | |
23 } | |
24 | |
25 private: | |
26 std::mt19937 generator_; | |
27 std::uniform_int_distribution<bool> bool_pool_; | |
28 }; | |
29 | |
30 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { | |
aizatsky
2016/07/06 18:45:53
Let's add
struct FuzzerFixedParams {
bool show_
| |
31 if (size < 5) { | |
aizatsky
2016/07/06 18:45:53
should be sizeof(FuzzerFixedParams)
| |
32 // This fuzzer needs five bytes for required parameters. | |
33 return 0; | |
34 } | |
35 | |
36 bool show_in_default_list = data[0] & 1; | |
aizatsky
2016/07/06 18:45:53
use bit field in params struct.
| |
37 data++; | |
38 size--; | |
39 | |
40 PseudoRandomFilter filter(*reinterpret_cast<const int32_t*>(data)); | |
aizatsky
2016/07/06 18:45:53
these 4 bytes would go into rng and which doesn't
| |
41 data += sizeof(int32_t); | |
42 size -= sizeof(int32_t); | |
43 | |
44 TemplateURLParser::Parse(SearchTermsData(), show_in_default_list, | |
45 reinterpret_cast<const char*>(data), size, &filter); | |
46 return 0; | |
47 } | |
OLD | NEW |