archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Reduce size limit in parser fuzzer

Browse source 
Avoid stack overflows during compilation of deeply nested
expressions.
This commit is contained in:
Nikita Popov 2019-11-07 20:47:04 +01:00
parent ab6b412a0b
commit 11649a6d77
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sapi/fuzzer/fuzzer-parser.c
View file

@ -27,7 +27,7 @@
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
char *s;
if (Size > 64 * 1024) {
if (Size > 32 * 1024) {
/* Large inputs have a large impact on fuzzer performance,
* but are unlikely to be necessary to reach new codepaths. */
return 0;

2
sapi/fuzzer/generate_parser_corpus.php
View file

@ -9,11 +9,13 @@ $it = new RecursiveIteratorIterator(
$corpusDir = __DIR__ . '/corpus/parser';
@mkdir($corpusDir);
$maxLen = 32 * 1024;
foreach ($it as $file) {
if (!preg_match('/\.phpt$/', $file)) continue;
$code = file_get_contents($file);
if (!preg_match('/--FILE--\R(.*?)\R--([_A-Z]+)--/s', $code, $matches)) continue;
$code = $matches[1];
if (strlen($code) > $maxLen) continue;
$outFile = str_replace($testsDir, '', $file);
$outFile = str_replace('/', '_', $outFile);