53c5d570ca
Change-Id: I095178b1b3c61829abf5c08b8b81cd7415e3e795 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/162747 Tested-by: Caolán McNamara <caolan.mcnamara@collabora.com> Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
96 lines
3.4 KiB
C++
96 lines
3.4 KiB
C++
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
|
|
/*
|
|
* This file is part of the LibreOffice project.
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
#include <tools/stream.hxx>
|
|
#include <vcl/FilterConfigItem.hxx>
|
|
#include <com/sun/star/awt/XToolkit.hpp>
|
|
#include <com/sun/star/ucb/XContentProvider.hpp>
|
|
#include <com/sun/star/ucb/XUniversalContentBroker.hpp>
|
|
#include <libxml/parser.h>
|
|
#include "commonfuzzer.hxx"
|
|
|
|
extern "C" void* ScCreateDialogFactory() { return nullptr; }
|
|
|
|
extern "C" bool TestFODSExportXLS(SvStream& rStream);
|
|
|
|
static void silent_error_func(void*, const char* /*format*/, ...) {}
|
|
|
|
extern "C" int LLVMFuzzerInitialize(int* argc, char*** argv)
|
|
{
|
|
if (__lsan_disable)
|
|
__lsan_disable();
|
|
|
|
CommonInitialize(argc, argv);
|
|
|
|
// initialise unconfigured UCB:
|
|
css::uno::Reference<css::ucb::XUniversalContentBroker> xUcb(
|
|
comphelper::getProcessServiceFactory()->createInstance(
|
|
"com.sun.star.ucb.UniversalContentBroker"),
|
|
css::uno::UNO_QUERY_THROW);
|
|
css::uno::Sequence<css::uno::Any> aArgs{ css::uno::Any(OUString("NoConfig")) };
|
|
css::uno::Reference<css::ucb::XContentProvider> xFileProvider(
|
|
comphelper::getProcessServiceFactory()->createInstanceWithArguments(
|
|
"com.sun.star.ucb.FileContentProvider", aArgs),
|
|
css::uno::UNO_QUERY_THROW);
|
|
xUcb->registerContentProvider(xFileProvider, "file", true);
|
|
|
|
// create and hold a reference to XToolkit here to avoid the lsan warning about its leak
|
|
// due to getting created in the unusual case of no vcl main loop
|
|
static css::uno::Reference<css::awt::XToolkit> xTk(
|
|
comphelper::getProcessServiceFactory()->createInstance("com.sun.star.awt.Toolkit"),
|
|
css::uno::UNO_QUERY_THROW);
|
|
|
|
if (__lsan_enable)
|
|
__lsan_enable();
|
|
|
|
xmlInitParser();
|
|
xmlSetGenericErrorFunc(nullptr, silent_error_func);
|
|
|
|
return 0;
|
|
}
|
|
|
|
extern "C" size_t LLVMFuzzerMutate(uint8_t* Data, size_t Size, size_t MaxSize);
|
|
|
|
extern "C" {
|
|
__attribute__((weak)) void __msan_unpoison(const volatile void*, size_t) {}
|
|
}
|
|
|
|
extern "C" size_t LLVMFuzzerCustomMutator(uint8_t* Data, size_t Size, size_t MaxSize,
|
|
unsigned int /*Seed*/)
|
|
{
|
|
size_t Ret = LLVMFuzzerMutate(Data, Size, MaxSize);
|
|
|
|
__msan_unpoison(Data, Ret);
|
|
|
|
// an effort to only generate valid xml, in this fuzzer we only really care
|
|
// about the deeper levels of turning valid input into calc layout and
|
|
// xls export
|
|
|
|
xmlParserCtxtPtr ctxt = xmlNewParserCtxt();
|
|
xmlDocPtr Doc = xmlCtxtReadMemory(ctxt, reinterpret_cast<const char*>(Data), Ret, nullptr,
|
|
nullptr, XML_PARSE_NONET);
|
|
if (Doc == nullptr)
|
|
Ret = 0;
|
|
else
|
|
xmlFreeDoc(Doc);
|
|
xmlFreeParserCtxt(ctxt);
|
|
xmlResetLastError();
|
|
return Ret;
|
|
}
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
|
|
{
|
|
SvMemoryStream aStream(const_cast<uint8_t*>(data), size, StreamMode::READ);
|
|
bool bFODTLoaded = TestFODSExportXLS(aStream);
|
|
// if the fodt didn't load then reject so that input will not be added to the corpus
|
|
// we're not interested in input that doesn't go on to exercise the xls export
|
|
return bFODTLoaded ? 0 : -1;
|
|
}
|
|
|
|
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
|