summaryrefslogtreecommitdiff
path: root/bin/fuzzfiles
blob: ed0432d2371cce40ab87814c1ea81cf76058d52d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
#! /bin/bash
#
# This file is part of the LibreOffice project.
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
#

#check that zzuf is installed
hash zzuf &> /dev/null
if [ $? -eq 1 ];then
    echo >&2 "zzuf not found. Please install and/or fix the PATH environment variable. Aborting"
    exit -1
fi

#check that file(s) to fuzz are mentioned
if [[ $# -eq 0 ]]; then
    echo "Usage: fuzzfiles.sh <list of seed files to fuzz>"
    echo "The generated fuzzed files will be output to the current working directory"
    echo "The fuzzed files will be named XYZ-ratio-NNNN where:"
    echo -e "\tXYZ: the original file name"
    echo -e "\tratio: the fuzz ratio (what % of bytes were fuzzed)"
    echo -e "\tNNNN: the mutation # for that file and ratio combo"
    exit -1
fi

for file in $@; do
    if [ -d $file ]; then
        echo "$file is a directory. Only files are allowed"
    elif [ -e $file ]; then
        basename=${file##*/}
        #Sequence from 0.001 to 0.5
        for ratio in `seq -w 1 2 500 | sed -e 's/^/0./'`; do
            echo "Fuzzing $file with ratio $ratio"
            for i in {1..1000}; do
                zzuf -r $ratio < $file > "$basename-$ratio-$i"
                done #end of for i in {1..
            done #end of for ratio in ...
    fi #end if of file validity check
done #end for file in $@
(as alluded to in comments in compilerplugins/clang/external.cxx) are illustrated by the fact that while struct S1 { int f() { return 0; } }; int f(S1 s) { return s.f(); } namespace N { struct S2: S1 { int f() { return 1; } }; int f(S2 s) { return s.f(); } } int main() { return f(N::S2()); } returns 1, both moving just the struct S2 into an nunnamed namespace, struct S1 { int f() { return 0; } }; int f(S1 s) { return s.f(); } namespace N { namespace { struct S2: S1 { int f() { return 1; } }; } int f(S2 s) { return s.f(); } } int main() { return f(N::S2()); } as well as moving just the function f overload into an unnamed namespace, struct S1 { int f() { return 0; } }; int f(S1 s) { return s.f(); } namespace N { struct S2: S1 { int f() { return 1; } }; namespace { int f(S2 s) { return s.f(); } } } int main() { return f(N::S2()); } would each change the program to return 0 instead. Change-Id: I4d09f7ac5e8f9bcd6e6bde4712608444b642265c Reviewed-on: https://gerrit.libreoffice.org/60539 Tested-by: Jenkins Reviewed-by: Stephan Bergmann <sbergman@redhat.com>