/* +----------------------------------------------------------------------+ | Copyright © The PHP Group and Contributors. | +----------------------------------------------------------------------+ | This source file is subject to the Modified BSD License that is | | bundled with this package in the file LICENSE, and is available | | through the World Wide Web at . | | | | SPDX-License-Identifier: BSD-3-Clause | +----------------------------------------------------------------------+ | Authors: Stanislav Malyshev | +----------------------------------------------------------------------+ */ #include "fuzzer.h" #include "Zend/zend.h" #include
#include "main/php_main.h" #include "ext/standard/php_var.h" #include #include #include #include #include #include #include "fuzzer-sapi.h" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { #ifdef HAVE_EXIF php_stream *stream; zval stream_zv; if (Size > 256 * 1024) { /* Large inputs have a large impact on fuzzer performance, * but are unlikely to be necessary to reach new codepaths. */ return 0; } if (fuzzer_request_startup() == FAILURE) { return 0; } stream = php_stream_memory_create(TEMP_STREAM_DEFAULT); php_stream_write(stream, (const char *) Data, Size); php_stream_to_zval(stream, &stream_zv); fuzzer_call_php_func_zval("exif_read_data", 1, &stream_zv); zval_ptr_dtor(&stream_zv); /* cleanup */ php_request_shutdown(NULL); return 0; #else fprintf(stderr, "\n\nERROR:\nPHP built without EXIF, recompile with --enable-exif to use this fuzzer\n"); exit(1); #endif } int LLVMFuzzerInitialize(int *argc, char ***argv) { fuzzer_init_php(NULL); /* fuzzer_shutdown_php(); */ return 0; }