archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 05:58:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add fuzzer SAPIs to the core

Browse source
This commit is contained in:
Stanislav Malyshev 2019-07-30 22:45:55 -07:00 • committed by Nikita Popov
parent 9b9fac78b0
commit 41f45647f9
123 changed files with 936 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

73
sapi/fuzzer/fuzzer-json.c Normal file
View file

@ -0,0 +1,73 @@
/*
+----------------------------------------------------------------------+
| PHP Version 7 |
+----------------------------------------------------------------------+
| Copyright (c) The PHP Group |
+----------------------------------------------------------------------+
| This source file is subject to version 3.01 of the PHP license, |
| that is bundled with this package in the file LICENSE, and is |
| available through the world-wide-web at the following url: |
| http://www.php.net/license/3_01.txt |
| If you did not receive a copy of the PHP license and are unable to |
| obtain it through the world-wide-web, please send a note to |
| license@php.net so we can mail you a copy immediately. |
+----------------------------------------------------------------------+
| Authors: Johannes Schlüter <johanes@php.net> |
| Stanislav Malyshev <stas@php.net> |
+----------------------------------------------------------------------+
*/
#include "fuzzer.h"
#include "Zend/zend.h"
#include "main/php_config.h"
#include "main/php_main.h"
#include <stdio.h>
#include <stdint.h>
#include <stdlib.h>
#include "fuzzer-sapi.h"
#ifdef HAVE_JSON
#include "ext/json/php_json_parser.h"
#endif
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
#ifdef HAVE_JSON
char *data = malloc(Size+1);
memcpy(data, Data, Size);
data[Size] = '\0';
if (php_request_startup()==FAILURE) {
php_module_shutdown();
return 0;
}
for (int option = 0; option <=1; ++option) {
zval result;
php_json_parser parser;
php_json_parser_init(&parser, &result, data, Size, option, 10);
php_json_yyparse(&parser);
ZVAL_UNDEF(&result);
}
php_request_shutdown(NULL);
free(data);
#else
fprintf(stderr, "\n\nERROR:\nPHP built without JSON, recompile with --enable-json to use this fuzzer\n");
exit(1);
#endif
return 0;
}
int LLVMFuzzerInitialize(int *argc, char ***argv) {
fuzzer_init_php();
/* fuzzer_shutdown_php(); */
return 0;
}