| // Protocol Buffers - Google's data interchange format |
| // Copyright 2023 Google LLC. All rights reserved. |
| // |
| // Use of this source code is governed by a BSD-style |
| // license that can be found in the LICENSE file or at |
| // https://developers.google.com/open-source/licenses/bsd |
| |
| #ifndef UPB_TEST_FUZZ_UTIL_H_ |
| #define UPB_TEST_FUZZ_UTIL_H_ |
| |
| #include <string> |
| #include <vector> |
| |
| #include "upb/mem/arena.h" |
| #include "upb/mini_table/extension_registry.h" |
| #include "upb/mini_table/message.h" |
| |
| namespace upb { |
| namespace fuzz { |
| |
| struct MiniTableFuzzInput { |
| // MiniDescripotrs for N messages, in the format accepted by |
| // upb_MiniTable_Build(). |
| std::vector<std::string> mini_descriptors; |
| |
| // MiniDescripotrs for N enums, in the format accepted by |
| // upb_MiniTableEnum_Build(). |
| std::vector<std::string> enum_mini_descriptors; |
| |
| // A MiniDescriptor for N extensions, in the format accepted by |
| // upb_MiniTableExtension_Build(). |
| std::string extensions; |
| |
| // Integer indexes into the message or enum mini tables lists. These specify |
| // which message or enum to use for each sub-message or enum field. We mod |
| // by the total number of enums or messages so that any link value can be |
| // valid. |
| std::vector<uint32_t> links; |
| }; |
| |
| // Builds an arbitrary mini table corresponding to the random data in `input`. |
| // This function should be capable of producing any mini table that can |
| // successfully build, and any topology of messages and enums (including |
| // cycles). |
| // |
| // As currently written, it effectively fuzzes the mini descriptor parser also, |
| // and can therefore trigger any bugs in that parser. To better isolate these |
| // two, we may want to change this implementation to use the mini descriptor |
| // builder API so we are producing mini descriptors in a known good format. That |
| // would mostly eliminate the chance of crashing the mini descriptor parser |
| // itself. |
| // |
| // TODO: maps. If we give maps some space in the regular encoding instead of |
| // using a separate function, we could get that for free. |
| const upb_MiniTable* BuildMiniTable(const MiniTableFuzzInput& input, |
| upb_ExtensionRegistry** exts, |
| upb_Arena* arena); |
| |
| } // namespace fuzz |
| } // namespace upb |
| |
| #endif // UPB_TEST_FUZZ_UTIL_H_ |