summaryrefslogtreecommitdiff
path: root/testing/libfuzzer
diff options
context:
space:
mode:
Diffstat (limited to 'testing/libfuzzer')
-rw-r--r--testing/libfuzzer/BUILD.gn6
-rw-r--r--testing/libfuzzer/pdf_cfx_barcode_fuzzer.cc38
2 files changed, 44 insertions, 0 deletions
diff --git a/testing/libfuzzer/BUILD.gn b/testing/libfuzzer/BUILD.gn
index d9dc0ee58f..e15ac05cbb 100644
--- a/testing/libfuzzer/BUILD.gn
+++ b/testing/libfuzzer/BUILD.gn
@@ -39,6 +39,12 @@ template("pdfium_fuzzer") {
}
if (pdf_enable_xfa) {
+ pdfium_fuzzer("pdf_cfx_barcode_fuzzer") {
+ sources = [
+ "pdf_cfx_barcode_fuzzer.cc",
+ ]
+ }
+
pdfium_fuzzer("pdf_cfx_saxreader_fuzzer") {
sources = [
"pdf_cfx_saxreader_fuzzer.cc",
diff --git a/testing/libfuzzer/pdf_cfx_barcode_fuzzer.cc b/testing/libfuzzer/pdf_cfx_barcode_fuzzer.cc
new file mode 100644
index 0000000000..24cf0ab516
--- /dev/null
+++ b/testing/libfuzzer/pdf_cfx_barcode_fuzzer.cc
@@ -0,0 +1,38 @@
+// Copyright 2017 The PDFium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <memory>
+
+#include "core/fxcrt/fx_string.h"
+#include "xfa/fwl/cfx_barcode.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+ if (size < 2 * sizeof(wchar_t))
+ return 0;
+
+ BC_TYPE type = static_cast<BC_TYPE>(data[0] % (BC_DATAMATRIX + 1));
+
+ // Only used one byte, but align with wchar_t for string below.
+ data += sizeof(wchar_t);
+ size -= sizeof(wchar_t);
+
+ CFX_Barcode barcode;
+ if (!barcode.Create(type))
+ return 0;
+
+ // TODO(tsepez): Setup more options from |data|.
+ barcode.SetModuleHeight(300);
+ barcode.SetModuleWidth(420);
+ barcode.SetHeight(298);
+ barcode.SetWidth(418);
+
+ CFX_WideStringC content(reinterpret_cast<const wchar_t*>(data),
+ size / sizeof(wchar_t));
+
+ if (!barcode.Encode(content, false))
+ return 0;
+
+ // TODO(tsepez): Output to device.
+ return 0;
+}