/* * AR (Unix archive) format fuzzer for libarchive * Tests BSD and GNU ar formats */ #include #include #include #include "archive.h" #include "archive_entry.h" #include "fuzz_helpers.h" static constexpr size_t kMaxInputSize = 512 * 1024; extern "C" int LLVMFuzzerTestOneInput(const uint8_t *buf, size_t len) { if (len == 0 || len > kMaxInputSize) { return 0; } struct archive *a = archive_read_new(); if (a == NULL) { return 0; } archive_read_support_format_ar(a); archive_read_support_filter_all(a); Buffer buffer = {buf, len, 0}; if (archive_read_open(a, &buffer, NULL, reader_callback, NULL) != ARCHIVE_OK) { archive_read_free(a); return 0; } std::vector data_buffer(4096, 0); struct archive_entry *entry; while (archive_read_next_header(a, &entry) == ARCHIVE_OK) { archive_entry_pathname(entry); archive_entry_size(entry); archive_entry_mtime(entry); archive_entry_mode(entry); archive_entry_uid(entry); archive_entry_gid(entry); ssize_t r; while ((r = archive_read_data(a, data_buffer.data(), data_buffer.size())) > 0) ; } archive_read_free(a); return 0; }