Fuzz rtc::StringToNumber.
StringToNumber is directly used in parsing the SDP so it should be fuzzed. Bug: webrtc:10395 Change-Id: I85b520fbefd34d3dba49950c5ff297b482c572b1 Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/127123 Commit-Queue: Benjamin Wright <benwright@webrtc.org> Reviewed-by: Qingsi Wang <qingsi@webrtc.org> Cr-Commit-Position: refs/heads/master@{#27089}
This commit is contained in:

committed by
Commit Bot

parent
6a5e976fbe
commit
dfaea9dd98
@ -577,3 +577,13 @@ webrtc_fuzzer_test("field_trial_fuzzer") {
|
||||
]
|
||||
seed_corpus = "corpora/field_trial-corpus"
|
||||
}
|
||||
|
||||
webrtc_fuzzer_test("string_to_number_fuzzer") {
|
||||
sources = [
|
||||
"string_to_number_fuzzer.cc",
|
||||
]
|
||||
deps = [
|
||||
"../../rtc_base:rtc_base_approved",
|
||||
]
|
||||
seed_corpus = "corpora/string_to_number-corpus"
|
||||
}
|
||||
|
1
test/fuzzers/corpora/string_to_number-corpus/0
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/0
Normal file
@ -0,0 +1 @@
|
||||
90742757
|
1
test/fuzzers/corpora/string_to_number-corpus/1
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/1
Normal file
@ -0,0 +1 @@
|
||||
27.70727677
|
1
test/fuzzers/corpora/string_to_number-corpus/2
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/2
Normal file
@ -0,0 +1 @@
|
||||
8
|
1
test/fuzzers/corpora/string_to_number-corpus/3
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/3
Normal file
@ -0,0 +1 @@
|
||||
0.0001
|
1
test/fuzzers/corpora/string_to_number-corpus/4
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/4
Normal file
@ -0,0 +1 @@
|
||||
27277272727272727272
|
1
test/fuzzers/corpora/string_to_number-corpus/5
Normal file
1
test/fuzzers/corpora/string_to_number-corpus/5
Normal file
@ -0,0 +1 @@
|
||||
999999999999999999999999999999999999999999999999999999999999999999999999999999
|
34
test/fuzzers/string_to_number_fuzzer.cc
Normal file
34
test/fuzzers/string_to_number_fuzzer.cc
Normal file
@ -0,0 +1,34 @@
|
||||
/*
|
||||
* Copyright (c) 2019 The WebRTC project authors. All Rights Reserved.
|
||||
*
|
||||
* Use of this source code is governed by a BSD-style license
|
||||
* that can be found in the LICENSE file in the root of the source
|
||||
* tree. An additional intellectual property rights grant can be found
|
||||
* in the file PATENTS. All contributing project authors may
|
||||
* be found in the AUTHORS file in the root of the source tree.
|
||||
*/
|
||||
|
||||
#include <stddef.h>
|
||||
#include <stdint.h>
|
||||
#include <string>
|
||||
|
||||
#include "rtc_base/string_to_number.h"
|
||||
|
||||
namespace webrtc {
|
||||
|
||||
void FuzzOneInput(const uint8_t* data, size_t size) {
|
||||
std::string number_to_parse(reinterpret_cast<const char*>(data), size);
|
||||
rtc::StringToNumber<int8_t>(number_to_parse);
|
||||
rtc::StringToNumber<int16_t>(number_to_parse);
|
||||
rtc::StringToNumber<int32_t>(number_to_parse);
|
||||
rtc::StringToNumber<int64_t>(number_to_parse);
|
||||
rtc::StringToNumber<uint8_t>(number_to_parse);
|
||||
rtc::StringToNumber<uint16_t>(number_to_parse);
|
||||
rtc::StringToNumber<uint32_t>(number_to_parse);
|
||||
rtc::StringToNumber<uint64_t>(number_to_parse);
|
||||
rtc::StringToNumber<float>(number_to_parse);
|
||||
rtc::StringToNumber<double>(number_to_parse);
|
||||
rtc::StringToNumber<long double>(number_to_parse);
|
||||
}
|
||||
|
||||
} // namespace webrtc
|
Reference in New Issue
Block a user