| OLD | NEW |
| (Empty) |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "base/command_line.h" | |
| 6 #include "base/files/file.h" | |
| 7 #include "base/files/file_util.h" | |
| 8 #include "base/strings/string_number_conversions.h" | |
| 9 #include "net/spdy/fuzzing/hpack_fuzz_util.h" | |
| 10 | |
| 11 namespace { | |
| 12 | |
| 13 // Specifies a file having HPACK header sets. | |
| 14 const char kFileToParse[] = "file-to-parse"; | |
| 15 | |
| 16 // Target file for mutated HPACK header sets. | |
| 17 const char kFileToWrite[] = "file-to-write"; | |
| 18 | |
| 19 // Number of bits to flip per 1,024 bytes of input. | |
| 20 const char kFlipsPerThousand[] = "flips-per-thousand-bytes"; | |
| 21 | |
| 22 } // namespace | |
| 23 | |
| 24 using base::StringPiece; | |
| 25 using net::HpackFuzzUtil; | |
| 26 using std::string; | |
| 27 | |
| 28 // Reads length-prefixed input blocks, applies a bit-flipping mutation to each | |
| 29 // block, and writes length-prefixed blocks to the output file. While blocks | |
| 30 // themselves are mutated, the length-prefixes of written blocks are not. | |
| 31 int main(int argc, char** argv) { | |
| 32 base::CommandLine::Init(argc, argv); | |
| 33 const base::CommandLine& command_line = | |
| 34 *base::CommandLine::ForCurrentProcess(); | |
| 35 | |
| 36 if (!command_line.HasSwitch(kFileToParse) || | |
| 37 !command_line.HasSwitch(kFileToWrite) || | |
| 38 !command_line.HasSwitch(kFlipsPerThousand)) { | |
| 39 LOG(ERROR) << "Usage: " << argv[0] | |
| 40 << " --" << kFileToParse << "=/path/to/file.in" | |
| 41 << " --" << kFileToWrite << "=/path/to/file.out" | |
| 42 << " --" << kFlipsPerThousand << "=10"; | |
| 43 return -1; | |
| 44 } | |
| 45 string file_to_parse = command_line.GetSwitchValueASCII(kFileToParse); | |
| 46 string file_to_write = command_line.GetSwitchValueASCII(kFileToWrite); | |
| 47 | |
| 48 int flip_ratio = 0; | |
| 49 CHECK(base::StringToInt(command_line.GetSwitchValueASCII(kFlipsPerThousand), | |
| 50 &flip_ratio)); | |
| 51 | |
| 52 DVLOG(1) << "Reading input from " << file_to_parse; | |
| 53 HpackFuzzUtil::Input input; | |
| 54 CHECK(base::ReadFileToString(base::FilePath::FromUTF8Unsafe(file_to_parse), | |
| 55 &input.input)); | |
| 56 | |
| 57 DVLOG(1) << "Writing output to " << file_to_write; | |
| 58 base::File file_out(base::FilePath::FromUTF8Unsafe(file_to_write), | |
| 59 base::File::FLAG_CREATE_ALWAYS | base::File::FLAG_WRITE); | |
| 60 CHECK(file_out.IsValid()) << file_out.error_details(); | |
| 61 | |
| 62 DVLOG(1) << "Flipping " << flip_ratio << " bits per 1024 input bytes"; | |
| 63 | |
| 64 size_t block_count = 0; | |
| 65 StringPiece block; | |
| 66 while (HpackFuzzUtil::NextHeaderBlock(&input, &block)) { | |
| 67 HpackFuzzUtil::FlipBits( | |
| 68 reinterpret_cast<uint8_t*>(const_cast<char*>(block.data())), | |
| 69 block.size(), flip_ratio); | |
| 70 | |
| 71 string prefix = HpackFuzzUtil::HeaderBlockPrefix(block.size()); | |
| 72 | |
| 73 CHECK_LT(0, file_out.WriteAtCurrentPos(prefix.data(), prefix.size())); | |
| 74 CHECK_LT(0, file_out.WriteAtCurrentPos(block.data(), block.size())); | |
| 75 ++block_count; | |
| 76 } | |
| 77 CHECK(file_out.Flush()); | |
| 78 DVLOG(1) << "Mutated " << block_count << " blocks."; | |
| 79 return 0; | |
| 80 } | |
| OLD | NEW |