( )⚙ D3697 fuzz: try and generate an interesting mpatch seed from a repo

This is an archive of the discontinued Mercurial Phabricator instance.

Differential D3697

fuzz: try and generate an interesting mpatch seed from a repo
ClosedPublic

Authored by durin42 on Jun 6 2018, 1:33 PM.

Details

Reviewers
None
Group Reviewers
hg-reviewers
Commits
rHG99ab72b867b7: fuzz: try and generate an interesting mpatch seed from a repo
Summary

Diff Detail

Repository
rHG Mercurial
Lint
Lint Skipped
Unit
Unit Tests Skipped

Event Timeline

durin42 created this revision.Jun 6 2018, 1:33 PM
Closed by commit rHG99ab72b867b7: fuzz: try and generate an interesting mpatch seed from a repo (authored by durin42). · Explain WhyJun 8 2018, 10:29 AM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathPackages
Mcontrib/fuzz/mpatch_corpus.py (17 lines)

Diff 8988

contrib/fuzz/mpatch_corpus.py

from __future__ import absolute_import from __future__ import absolute_import, print_function
import argparse import argparse
import struct import struct
import zipfile import zipfile
from mercurial import (
hg,
ui as uimod,
)
ap = argparse.ArgumentParser() ap = argparse.ArgumentParser()
ap.add_argument("out", metavar="some.zip", type=str, nargs=1) ap.add_argument("out", metavar="some.zip", type=str, nargs=1)
args = ap.parse_args() args = ap.parse_args()
class deltafrag(object): class deltafrag(object):
def __init__(self, start, end, data): def __init__(self, start, end, data):
self.start = start self.start = start
self.end = end self.end = end
"one_delta_starts_late", "one_delta_starts_late",
str(corpus('a', [delta([deltafrag(3, 1, 'b')])])) str(corpus('a', [delta([deltafrag(3, 1, 'b')])]))
) )
zf.writestr( zf.writestr(
"one_delta_ends_late", "one_delta_ends_late",
str(corpus('a', [delta([deltafrag(0, 20, 'b')])])) str(corpus('a', [delta([deltafrag(0, 20, 'b')])]))
) )
try:
# Generated from repo data
r = hg.repository(uimod.ui(), '../..')
fl = r.file('mercurial/manifest.py')
rl = getattr(fl, '_revlog', fl)
bins = rl._chunks(rl._deltachain(10)[0])
zf.writestr('manifest_py_rev_10',
str(corpus(bins[0], bins[1:])))
except: # skip this, so no re-raises
print('skipping seed file from repo data')
# Automatically discovered by running the fuzzer # Automatically discovered by running the fuzzer
zf.writestr( zf.writestr(
"mpatch_decode_old_overread", "\x02\x00\x00\x00\x02\x00\x00\x00" "mpatch_decode_old_overread", "\x02\x00\x00\x00\x02\x00\x00\x00"
) )
zf.writestr( zf.writestr(
"mpatch_apply_over_memcpy", "mpatch_apply_over_memcpy",
'\x13\x01\x00\x05\xd0\x00\x00\x00\x00\x00\x00\x00\x00\n \x00\x00\x00' '\x13\x01\x00\x05\xd0\x00\x00\x00\x00\x00\x00\x00\x00\n \x00\x00\x00'
'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'