##// END OF EJS Templates
fuzzers: init Python in LLVMFuzzerInitialize and intentionally leak it...
Augie Fackler -
r40125:3418f83c default
parent child Browse files
Show More
@@ -1,75 +1,74 b''
1 1 #include <Python.h>
2 2 #include <assert.h>
3 3 #include <stdlib.h>
4 4 #include <unistd.h>
5 5
6 6 #include <string>
7 7
8 8 extern "C" {
9 9
10 10 /* TODO: use Python 3 for this fuzzing? */
11 11 PyMODINIT_FUNC initparsers(void);
12 12
13 13 static char cpypath[8192] = "\0";
14 14
15 15 extern "C" int LLVMFuzzerInitialize(int *argc, char ***argv)
16 16 {
17 17 const std::string subdir = "/sanpy/lib/python2.7";
18 18 /* HACK ALERT: we need a full Python installation built without
19 19 pymalloc and with ASAN, so we dump one in
20 20 $OUT/sanpy/lib/python2.7. This helps us wire that up. */
21 21 std::string selfpath(*argv[0]);
22 22 std::string pypath;
23 23 auto pos = selfpath.rfind("/");
24 24 if (pos == std::string::npos) {
25 25 char wd[8192];
26 26 getcwd(wd, 8192);
27 27 pypath = std::string(wd) + subdir;
28 28 } else {
29 29 pypath = selfpath.substr(0, pos) + subdir;
30 30 }
31 31 strncpy(cpypath, pypath.c_str(), pypath.size());
32 32 setenv("PYTHONPATH", cpypath, 1);
33 33 Py_SetPythonHome(cpypath);
34 Py_InitializeEx(0);
34 35 return 0;
35 36 }
36 37
37 38 int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)
38 39 {
39 Py_InitializeEx(0);
40 40 initparsers();
41 41 PyObject *mtext =
42 42 PyBytes_FromStringAndSize((const char *)Data, (Py_ssize_t)Size);
43 43 PyObject *mainmod = PyImport_AddModule("__main__");
44 44 PyObject *globals = PyModule_GetDict(mainmod);
45 45 PyObject *locals = PyDict_New();
46 46 PyDict_SetItemString(locals, "mdata", mtext);
47 47 PyCodeObject *code =
48 48 (PyCodeObject *)Py_CompileString(R"py(
49 49 from parsers import lazymanifest
50 50 lm = lazymanifest(mdata)
51 51 try:
52 52 # iterate the whole thing, which causes the code to fully parse
53 53 # every line in the manifest
54 54 list(lm.iterentries())
55 55 lm[b'xyzzy'] = (b'\0' * 20, 'x')
56 56 # do an insert, text should change
57 57 assert lm.text() != mdata, "insert should change text and didn't: %r %r" % (lm.text(), mdata)
58 58 del lm[b'xyzzy']
59 59 # should be back to the same
60 60 assert lm.text() == mdata, "delete should have restored text but didn't: %r %r" % (lm.text(), mdata)
61 61 except Exception as e:
62 62 pass
63 63 # uncomment this print if you're editing this Python code
64 64 # to debug failures.
65 65 # print e
66 66 )py",
67 67 "fuzzer", Py_file_input);
68 68 PyEval_EvalCode(code, globals, locals);
69 69 Py_DECREF(code);
70 70 Py_DECREF(locals);
71 71 Py_DECREF(mtext);
72 Py_Finalize();
73 72 return 0; // Non-zero return values are reserved for future use.
74 73 }
75 74 }
General Comments 0
You need to be logged in to leave comments. Login now