add a fuzzer for our lock files

Change-Id: Iaf28aa4455ea9d798d9e2649e1e7c6f1216846f3
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/136194
Tested-by: Caolán McNamara <caolanm@redhat.com>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>

5 files changed, 102 insertions, 0 deletions

diff --git a/Repository.mk b/Repository.mk
index 47a2f9c8202e..f1fe292936e3 100644
--- a/Repository.mk
+++ b/Repository.mk
@@ -157,6 +157,7 @@ $(eval $(call gb_Helper_register_executables_for_install,OOO,brand, \
 	$(call gb_Helper_optional,FUZZERS,sftfuzzer) \
 	$(call gb_Helper_optional,FUZZERS,dbffuzzer) \
 	$(call gb_Helper_optional,FUZZERS,webpfuzzer) \
+	$(call gb_Helper_optional,FUZZERS,lockfuzzer) \
 	soffice_bin \
     $(call gb_CondExeUnopkg, \
         unopkg_bin \
diff --git a/vcl/Executable_lockfuzzer.mk b/vcl/Executable_lockfuzzer.mk
new file mode 100644
index 000000000000..5bbb444d47db
--- /dev/null
+++ b/vcl/Executable_lockfuzzer.mk
@@ -0,0 +1,45 @@
+# -*- Mode: makefile-gmake; tab-width: 4; indent-tabs-mode: t -*-
+#
+#
+# This file is part of the LibreOffice project.
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+#
+
+include $(SRCDIR)/vcl/commonfuzzer.mk
+
+$(eval $(call gb_Executable_Executable,lockfuzzer))
+
+$(eval $(call gb_Executable_use_api,lockfuzzer,\
+    offapi \
+    udkapi \
+))
+
+$(eval $(call gb_Executable_use_externals,lockfuzzer,\
+	$(fuzzer_externals) \
+))
+
+$(eval $(call gb_Executable_set_include,lockfuzzer,\
+    $$(INCLUDE) \
+    -I$(SRCDIR)/vcl/inc \
+))
+
+$(eval $(call gb_Executable_use_libraries,lockfuzzer,\
+    $(fuzzer_core_libraries) \
+))
+
+$(eval $(call gb_Executable_use_static_libraries,lockfuzzer,\
+    $(fuzzer_statics) \
+))
+
+$(eval $(call gb_Executable_add_exception_objects,lockfuzzer,\
+    vcl/workben/lockfuzzer \
+))
+
+$(eval $(call gb_Executable_add_libs,lockfuzzer,\
+    $(LIB_FUZZING_ENGINE) \
+))
+
+# vim: set noet sw=4 ts=4:
diff --git a/vcl/Module_vcl.mk b/vcl/Module_vcl.mk
index 62660b718ec1..0e8e3c0e7b43 100644
--- a/vcl/Module_vcl.mk
+++ b/vcl/Module_vcl.mk
@@ -189,6 +189,7 @@ $(eval $(call gb_Module_add_targets,vcl,\
     Executable_sftfuzzer \
     Executable_dbffuzzer \
     Executable_webpfuzzer \
+    Executable_lockfuzzer \
 ))
 endif
 
diff --git a/vcl/workben/lockfuzzer.cxx b/vcl/workben/lockfuzzer.cxx
new file mode 100644
index 000000000000..cd083aaac802
--- /dev/null
+++ b/vcl/workben/lockfuzzer.cxx
@@ -0,0 +1,53 @@
+/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
+/*
+ * This file is part of the LibreOffice project.
+ *
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ */
+
+#include <svl/lockfilecommon.hxx>
+#include "commonfuzzer.hxx"
+
+#include <config_features.h>
+#include <com/sun/star/io/WrongFormatException.hpp>
+#include <osl/detail/component-mapping.h>
+
+const lib_to_factory_mapping* lo_get_factory_map(void)
+{
+    static lib_to_factory_mapping map[] = { { 0, 0 } };
+
+    return map;
+}
+
+const lib_to_constructor_mapping* lo_get_constructor_map(void)
+{
+    static lib_to_constructor_mapping map[] = { { 0, 0 } };
+
+    return map;
+}
+
+extern "C" void* lo_get_custom_widget_func(const char*) { return nullptr; }
+
+extern "C" int LLVMFuzzerInitialize(int* argc, char*** argv)
+{
+    TypicalFuzzerInitialize(argc, argv);
+    return 0;
+}
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
+{
+    sal_Int32 nCurPos(0);
+    css::uno::Sequence<sal_Int8> aBuffer(reinterpret_cast<const sal_Int8*>(data), size);
+    try
+    {
+        svt::LockFileCommon::ParseEntry(aBuffer, nCurPos);
+    }
+    catch (const css::io::WrongFormatException&)
+    {
+    }
+    return 0;
+}
+
+/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
diff --git a/vcl/workben/lockfuzzer.options b/vcl/workben/lockfuzzer.options
new file mode 100644
index 000000000000..f09db1b41438
--- /dev/null
+++ b/vcl/workben/lockfuzzer.options
@@ -0,0 +1,2 @@
+[libfuzzer]
+max_len = 32000