Skip to content

Commit

Permalink
Add basic test adapter for AFL
Browse files Browse the repository at this point in the history
  • Loading branch information
sudden6 committed Mar 23, 2020
1 parent ef70584 commit e94c08d
Show file tree
Hide file tree
Showing 5 changed files with 79 additions and 0 deletions.
3 changes: 3 additions & 0 deletions CMakeLists.txt
Original file line number Diff line number Diff line change
Expand Up @@ -510,4 +510,7 @@ if (BUILD_MISC_TESTS)
add_executable(save-generator
other/fun/save-generator.c)
target_link_modules(save-generator toxcore misc_tools)
add_executable(afl_toxsave
testing/afl_toxsave.c)
target_link_modules(afl_toxsave toxcore)
endif()
8 changes: 8 additions & 0 deletions testing/BUILD.bazel
Original file line number Diff line number Diff line change
Expand Up @@ -35,3 +35,11 @@ cc_binary(
"//c-toxcore/toxcore",
],
)

cc_binary(
name = "afl_toxsave",
srcs = ["afl_toxsave.c"],
deps = [
"//c-toxcore/toxcore",
],
)
Binary file added testing/afl_testdata/tox_saves/david.tox
Binary file not shown.
54 changes: 54 additions & 0 deletions testing/afl_toxsave.c
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
#include <malloc.h>
#include <stdio.h>

#include "../toxcore/tox.h"

int main(int argc, char **argv)
{
if (argc != 2) {
return -1;
}

// determine file size
FILE *fileptr = fopen(argv[1], "rb");
fseek(fileptr, 0, SEEK_END);
long filelen = ftell(fileptr);
rewind(fileptr);

// read file into buffer
uint8_t *buffer = (uint8_t *)malloc(filelen * sizeof(uint8_t));
size_t bytes_read = fread(buffer, filelen, 1, fileptr);

if (bytes_read != filelen) {
free(buffer);
return -1;
}

fclose(fileptr);

TOX_ERR_OPTIONS_NEW error_options = 0;

struct Tox_Options *tox_options = tox_options_new(&error_options);

if (error_options != TOX_ERR_NEW_OK) {
free(buffer);
return -1;
}

// pass test data to Tox
tox_options_set_savedata_data(tox_options, buffer, filelen);
tox_options_set_savedata_type(tox_options, TOX_SAVEDATA_TYPE_TOX_SAVE);

TOX_ERR_NEW error_new = 0;
Tox *tox = tox_new(tox_options, &error_new);

if (tox == NULL || error_new != TOX_ERR_NEW_OK) {
free(buffer);
return -1;
}

tox_kill(tox);
free(buffer);

return 0;
}
14 changes: 14 additions & 0 deletions testing/run_afl.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
#! /bin/sh

# move to repo root
cd ../
rm -R _afl_build
mkdir _afl_build
cd _afl_build

# build c-toxcore using afl instrumentation
cmake -DCMAKE_C_COMPILER=afl-clang -DBUILD_MISC_TESTS=ON ..
make

# start fuzzing
afl-fuzz -i ../testing/afl_testdata/tox_saves/ -o afl_out/ ./afl_toxsave @@

0 comments on commit e94c08d

Please sign in to comment.