archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Reduce max input size in parser fuzzer

Browse source 
Still seeing stack overflows for $$$$$x style input, let's reduce
the input size limit further...
This commit is contained in:
Nikita Popov 2021-10-06 19:14:20 +02:00
parent 25e2cfc27b
commit 5d05f810d0
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sapi/fuzzer/fuzzer-parser.c
View file

@ -26,7 +26,7 @@
#include "fuzzer-sapi.h" #include "fuzzer-sapi.h"
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
if (Size > 7 * 1024) { if (Size > 6 * 1024) {
/* Large inputs have a large impact on fuzzer performance and may cause stack overflows, /* Large inputs have a large impact on fuzzer performance and may cause stack overflows,
* but are unlikely to be necessary to reach new codepaths. */ * but are unlikely to be necessary to reach new codepaths. */
return 0; return 0;

2
sapi/fuzzer/generate_parser_corpus.php
View file

@ -9,7 +9,7 @@ $it = new RecursiveIteratorIterator(
$corpusDir = __DIR__ . '/corpus/parser'; $corpusDir = __DIR__ . '/corpus/parser';
@mkdir($corpusDir); @mkdir($corpusDir);
$maxLen = 7 * 1024; $maxLen = 6 * 1024;
foreach ($it as $file) { foreach ($it as $file) {
if (!preg_match('/\.phpt$/', $file)) continue; if (!preg_match('/\.phpt$/', $file)) continue;
$code = file_get_contents($file); $code = file_get_contents($file);