This is an archive of the discontinued Mercurial Phabricator instance.

Differential D3696

fuzz: structured helpers for creating mpatch seed corpus entries
ClosedPublic

Authored by durin42 on Jun 6 2018, 1:33 PM.

Details

Reviewers
None
Group Reviewers
hg-reviewers
Commits
rHG06e2fc08f6f0: fuzz: structured helpers for creating mpatch seed corpus entries
Summary

Maybe this is better. I'm not sold, honestly.

Diff Detail

Repository
rHG Mercurial
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Revision Contents
Changeset List

PathPackages
Mcontrib/fuzz/mpatch_corpus.py (46 lines)

Diff 8997

contrib/fuzz/mpatch_corpus.py

from __future__ import absolute_import from __future__ import absolute_import
import argparse import argparse
import struct import struct
import zipfile import zipfile
ap = argparse.ArgumentParser() ap = argparse.ArgumentParser()
ap.add_argument("out", metavar="some.zip", type=str, nargs=1) ap.add_argument("out", metavar="some.zip", type=str, nargs=1)
args = ap.parse_args() args = ap.parse_args()
class deltafrag(object):
def __init__(self, start, end, data):
self.start = start
self.end = end
self.data = data
def __str__(self):
return struct.pack(
">lll", self.start, self.end, len(self.data)) + self.data
class delta(object):
def __init__(self, frags):
self.frags = frags
def __str__(self):
return ''.join(str(f) for f in self.frags)
class corpus(object):
def __init__(self, base, deltas):
self.base = base
self.deltas = deltas
def __str__(self):
deltas = [str(d) for d in self.deltas]
parts = (
[
struct.pack(">B", len(deltas) + 1),
struct.pack(">H", len(self.base)),
]
+ [struct.pack(">H", len(d)) for d in deltas]
+ [self.base]
+ deltas
)
return "".join(parts)
with zipfile.ZipFile(args.out[0], "w", zipfile.ZIP_STORED) as zf: with zipfile.ZipFile(args.out[0], "w", zipfile.ZIP_STORED) as zf:
# Manually constructed entries # Manually constructed entries
zf.writestr( zf.writestr(
"one_delta_applies", "one_delta_applies",
"\x02\x00\x01\x00\ra\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x01b", str(corpus('a', [delta([deltafrag(0, 1, 'b')])]))
)
zf.writestr(
"one_delta_starts_late",
str(corpus('a', [delta([deltafrag(3, 1, 'b')])]))
)
zf.writestr(
"one_delta_ends_late",
str(corpus('a', [delta([deltafrag(0, 20, 'b')])]))
) )
# Automatically discovered by running the fuzzer # Automatically discovered by running the fuzzer
zf.writestr( zf.writestr(
"mpatch_decode_old_overread", "\x02\x00\x00\x00\x02\x00\x00\x00" "mpatch_decode_old_overread", "\x02\x00\x00\x00\x02\x00\x00\x00"
) )
zf.writestr( zf.writestr(
"mpatch_apply_over_memcpy", "mpatch_apply_over_memcpy",