mirror of
https://github.com/harfbuzz/harfbuzz.git
synced 2025-04-21 12:39:35 +00:00
c0f3af91b8
Fix for fuzzer timeout: https://oss-fuzz.com/testcase-detail/5001604901240832. - Operation limit is per glyph, so 100,000 should still be far more than needed. - Switches from for(...) to while(...) loop for iteration. for(...) calls it.end() which in this case triggers a complete iteration. - Cache CompositeGlyph size in the iterator to avoid needing to recalculate it. |
||
|---|---|---|
| .. | ||
| fonts | ||
| sets | ||
| hb-draw-fuzzer.cc | ||
| hb-fuzzer.hh | ||
| hb-set-fuzzer.cc | ||
| hb-shape-fuzzer.cc | ||
| hb-subset-fuzzer.cc | ||
| main.cc | ||
| Makefile.am | ||
| meson.build | ||
| README | ||
| run-draw-fuzzer-tests.py | ||
| run-shape-fuzzer-tests.py | ||
| run-subset-fuzzer-tests.py | ||
In order to build the fuzzer one needs to build HarfBuzz and
harfbuzz/test/fuzzing/hb-fuzzer.cc with:
- Using the most recent Clang
- With -fsanitize=address (or =undefined, or a combination)
- With -fsanitize-coverage=edge[,8bit-counters,trace-cmp]
- With various defines that limit worst case exponential behavior.
See FUZZING_CPPFLAGS in harfbuzz/src/Makefile.am for the list.
- link against libFuzzer
To run the fuzzer one needs to first obtain a test corpus as a directory
containing interesting fonts. A good starting point is inside
harfbuzz/test/shaping/fonts/fonts/.
Then, run the fuzzer like this:
./hb-fuzzer -max_len=2048 CORPUS_DIR
Where max_len specifies the maximal length of font files to handle.
The smaller the faster.
For more details consult the following locations:
- http://llvm.org/docs/LibFuzzer.html or
- https://github.com/google/libfuzzer-bot/tree/master/harfbuzz
- https://github.com/harfbuzz/harfbuzz/issues/139