From 15fba1debca5498989048677ffda38758b2df984 Mon Sep 17 00:00:00 2001 From: Arseny Kapoulkine Date: Fri, 13 Mar 2015 00:18:30 -0700 Subject: tests: Add support for afl-fuzz With the current setup it successfully finds the (fixed) DOCTYPE buffer overrun in ~50 minutes (on a single core). --- tests/data_fuzz_parse/basic.xml | 1 + tests/data_fuzz_parse/doctype.xml | 1 + tests/data_fuzz_parse/refs.xml | 1 + tests/data_fuzz_parse/types.xml | 1 + tests/data_fuzz_parse/utf16.xml | Bin 0 -> 700 bytes tests/data_fuzz_parse/utf32.xml | Bin 0 -> 652 bytes 6 files changed, 4 insertions(+) create mode 100644 tests/data_fuzz_parse/basic.xml create mode 100644 tests/data_fuzz_parse/doctype.xml create mode 100644 tests/data_fuzz_parse/refs.xml create mode 100644 tests/data_fuzz_parse/types.xml create mode 100644 tests/data_fuzz_parse/utf16.xml create mode 100644 tests/data_fuzz_parse/utf32.xml (limited to 'tests/data_fuzz_parse') diff --git a/tests/data_fuzz_parse/basic.xml b/tests/data_fuzz_parse/basic.xml new file mode 100644 index 0000000..a8eaa09 --- /dev/null +++ b/tests/data_fuzz_parse/basic.xml @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/tests/data_fuzz_parse/doctype.xml b/tests/data_fuzz_parse/doctype.xml new file mode 100644 index 0000000..dd1831d --- /dev/null +++ b/tests/data_fuzz_parse/doctype.xml @@ -0,0 +1 @@ + ]> ]]> ]> ]> \ No newline at end of file diff --git a/tests/data_fuzz_parse/refs.xml b/tests/data_fuzz_parse/refs.xml new file mode 100644 index 0000000..e42df5f --- /dev/null +++ b/tests/data_fuzz_parse/refs.xml @@ -0,0 +1 @@ + pcdata < > & " ' « &unknown; %entity; \ No newline at end of file diff --git a/tests/data_fuzz_parse/types.xml b/tests/data_fuzz_parse/types.xml new file mode 100644 index 0000000..dc6369a --- /dev/null +++ b/tests/data_fuzz_parse/types.xml @@ -0,0 +1 @@ + pcdata \ No newline at end of file diff --git a/tests/data_fuzz_parse/utf16.xml b/tests/data_fuzz_parse/utf16.xml new file mode 100644 index 0000000..3847a93 Binary files /dev/null and b/tests/data_fuzz_parse/utf16.xml differ diff --git a/tests/data_fuzz_parse/utf32.xml b/tests/data_fuzz_parse/utf32.xml new file mode 100644 index 0000000..51b8a89 Binary files /dev/null and b/tests/data_fuzz_parse/utf32.xml differ -- cgit v1.2.3