upstream/mercurial-mirror Files · contrib/fuzz/fuzzutil.cc

revlog: make sure we never use sparserevlog without general delta (issue6056)...

revlog: make sure we never use sparserevlog without general delta (issue6056) We are getting user report where the delta code tries to use `sparse-revlog` logic on repository where `generaldelta` is disabled. This can't work so we ensure the two booleans have a consistent value. Creating this kind of repository is not expected to be possible the current bug report point at a clonebundle related bug that is still to be properly isolated (Yuya Nishihara seems to a have done it). Corrupting a repository to reproduce the issue is possible. A test using this method is included in this fix.

Yuya Nishihara - - Load All Authors

File last commit:

r38234:a1c0873a default


                r41525:189e06b2

stable

Download file

             fuzzutil.cc
        
                    27 lines
            
             | 922 B
            
                | text/x-c
            
             |
                CppLexer
            
             / contrib / fuzz / fuzzutil.cc
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #include "fuzzutil.h"

      #include <cstring>

      #include <utility>

      contrib::optional<two_inputs> SplitInputs(const uint8_t *Data, size_t Size)

      {

      	if (!Size) {

      		return contrib::nullopt;

      	}

      	// figure out a random point in [0, Size] to split our input.

      	size_t left_size = (Data[0] / 255.0) * (Size - 1);

      	// Copy inputs to new allocations so if bdiff over-reads

      	// AddressSanitizer can detect it.

      	std::unique_ptr<char[]> left(new char[left_size]);

      	std::memcpy(left.get(), Data + 1, left_size);

      	// right starts at the next byte after left ends

      	size_t right_size = Size - (left_size + 1);

      	std::unique_ptr<char[]> right(new char[right_size]);

      	std::memcpy(right.get(), Data + 1 + left_size, right_size);

      	LOG(2) << "inputs are  " << left_size << " and " << right_size

      	       << " bytes" << std::endl;

      	two_inputs result = {std::move(right), right_size, std::move(left),

      	                     left_size};

      	return result;

      }

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#include "fuzzutil.h"

				#include <cstring>
				#include <utility>

				contrib::optional<two_inputs> SplitInputs(const uint8_t *Data, size_t Size)
				{
				if (!Size) {
				return contrib::nullopt;
				}
				// figure out a random point in [0, Size] to split our input.
				size_t left_size = (Data[0] / 255.0) * (Size - 1);

				// Copy inputs to new allocations so if bdiff over-reads
				// AddressSanitizer can detect it.
				std::unique_ptr<char[]> left(new char[left_size]);
				std::memcpy(left.get(), Data + 1, left_size);
				// right starts at the next byte after left ends
				size_t right_size = Size - (left_size + 1);
				std::unique_ptr<char[]> right(new char[right_size]);
				std::memcpy(right.get(), Data + 1 + left_size, right_size);
				LOG(2) << "inputs are " << left_size << " and " << right_size
				<< " bytes" << std::endl;
				two_inputs result = {std::move(right), right_size, std::move(left),
				left_size};
				return result;
				}