1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162 |
- #include "fuzzer.h"
- #include "Zend/zend.h"
- #include "main/php_config.h"
- #include "main/php_main.h"
- #include <stdio.h>
- #include <stdint.h>
- #include <stdlib.h>
- #include "fuzzer-sapi.h"
- #include "ext/json/php_json_parser.h"
- int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
- char *data = malloc(Size+1);
- memcpy(data, Data, Size);
- data[Size] = '\0';
- if (fuzzer_request_startup() == FAILURE) {
- return 0;
- }
- for (int option = 0; option <=1; ++option) {
- zval result;
- php_json_parser parser;
- php_json_parser_init(&parser, &result, data, Size, option, 10);
- if (php_json_yyparse(&parser) == SUCCESS) {
- zval_ptr_dtor(&result);
- }
- }
- php_request_shutdown(NULL);
- free(data);
- return 0;
- }
- int LLVMFuzzerInitialize(int *argc, char ***argv) {
- fuzzer_init_php();
-
- return 0;
- }
|