2946cd7010
to reflect the new license. We understand that people may be surprised that we're moving the header entirely to discuss the new license. We checked this carefully with the Foundation's lawyer and we believe this is the correct approach. Essentially, all code in the project is now made available by the LLVM project under our new license, so you will see that the license headers include that license only. Some of our contributors have contributed code under our old license, and accordingly, we have retained a copy of our old license notice in the top-level files in each project and repository. llvm-svn: 351636
76 lines
2.4 KiB
C++
76 lines
2.4 KiB
C++
//===--- fuzz-llvm-as.cpp - Fuzzer for llvm-as using lib/Fuzzer -----------===//
|
|
//
|
|
// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
|
|
// See https://llvm.org/LICENSE.txt for license information.
|
|
// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
//
|
|
// Build tool to fuzz the LLVM assembler (llvm-as) using
|
|
// lib/Fuzzer. The main reason for using this tool is that it is much
|
|
// faster than using afl-fuzz, since it is run in-process.
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
#include "llvm/ADT/StringRef.h"
|
|
#include "llvm/AsmParser/Parser.h"
|
|
#include "llvm/IR/LLVMContext.h"
|
|
#include "llvm/IR/Module.h"
|
|
#include "llvm/IR/Verifier.h"
|
|
#include "llvm/Support/ErrorHandling.h"
|
|
#include "llvm/Support/MemoryBuffer.h"
|
|
#include "llvm/Support/raw_ostream.h"
|
|
#include "llvm/Support/SourceMgr.h"
|
|
|
|
#include <csetjmp>
|
|
|
|
using namespace llvm;
|
|
|
|
static jmp_buf JmpBuf;
|
|
|
|
namespace {
|
|
|
|
void MyFatalErrorHandler(void *user_data, const std::string& reason,
|
|
bool gen_crash_diag) {
|
|
// Don't bother printing reason, just return to the test function,
|
|
// since a fatal error represents a successful parse (i.e. it correctly
|
|
// terminated with an error message to the user).
|
|
longjmp(JmpBuf, 1);
|
|
}
|
|
|
|
static bool InstalledHandler = false;
|
|
|
|
} // end of anonymous namespace
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
|
|
|
|
// Allocate space for locals before setjmp so that memory can be collected
|
|
// if parse exits prematurely (via longjmp).
|
|
StringRef Input((const char *)Data, Size);
|
|
// Note: We need to create a buffer to add a null terminator to the
|
|
// end of the input string. The parser assumes that the string
|
|
// parsed is always null terminated.
|
|
std::unique_ptr<MemoryBuffer> MemBuf = MemoryBuffer::getMemBufferCopy(Input);
|
|
SMDiagnostic Err;
|
|
LLVMContext Context;
|
|
std::unique_ptr<Module> M;
|
|
|
|
if (setjmp(JmpBuf))
|
|
// If reached, we have returned with non-zero status, so exit.
|
|
return 0;
|
|
|
|
// TODO(kschimpf) Write a main to do this initialization.
|
|
if (!InstalledHandler) {
|
|
llvm::install_fatal_error_handler(::MyFatalErrorHandler, nullptr);
|
|
InstalledHandler = true;
|
|
}
|
|
|
|
M = parseAssembly(MemBuf->getMemBufferRef(), Err, Context);
|
|
|
|
if (!M.get())
|
|
return 0;
|
|
|
|
verifyModule(*M.get());
|
|
return 0;
|
|
}
|