aboutsummaryrefslogtreecommitdiffstats
path: root/fuzz
AgeCommit message (Collapse)Author
2019-08-28Fix fuzz issues 15316 and 15390Jay Berkenbilt
2019-08-27Fix fuzz issue 16172 (overflow checking in OffsetInputSource)Jay Berkenbilt
2019-08-27Fix fuzz issue 15442 (overflow checking in BufferInputSource)Jay Berkenbilt
2019-08-27Fix fuzz issue 15387 (overflow checking xref size)Jay Berkenbilt
2019-08-26Fix fuzz issue 15475Jay Berkenbilt
2019-08-26Fix fuzz issue 16301Jay Berkenbilt
2019-08-26Move qpdf_fuzzer tests to the endJay Berkenbilt
This makes it faster to iterate on the other ones.
2019-08-26Fuzz build: allow easy addition of test filesJay Berkenbilt
2019-07-04Change list to vector for outline helpers (fixes #297)Thorsten Schöning
This change works around STL problems with Embarcadero C++ Builder version 10.2, but std::vector is more common than std::list in qpdf, and this is a relatively new API, so an API change is tolerable. Thanks to Thorsten Schöning <6223655+ams-tschoening@users.noreply.github.com> for the fix.
2019-06-23Add fuzzers to exercise specific pipeline classesJay Berkenbilt
2019-06-22Add QUtil::read_file_into_memoryJay Berkenbilt
This code was essentially duplicated between test_driver and standalone_fuzz_target_runner.
2019-06-21Update qpdf_fuzzer to increase coverageJay Berkenbilt
2019-06-21Clean up fuzzer installation and add test filesJay Berkenbilt
* Create the seed corpus in the build directory * Don't assume all fuzzers share an options file
2019-06-21Re-enable fuzzer testing in WindowsJay Berkenbilt
2019-06-21Fix sign and conversion warnings (major)Jay Berkenbilt
This makes all integer type conversions that have potential data loss explicit with calls that do range checks and raise an exception. After this commit, qpdf builds with no warnings when -Wsign-conversion -Wconversion is used with gcc or clang or when -W3 -Wd4800 is used with MSVC. This significantly reduces the likelihood of potential crashes from bogus integer values. There are some parts of the code that take int when they should take size_t or an offset. Such places would make qpdf not support files with more than 2^31 of something that usually wouldn't be so large. In the event that such a file shows up and is valid, at least qpdf would raise an error in the right spot so the issue could be legitimately addressed rather than failing in some weird way because of a silent overflow condition.
2019-06-18Remove qpdf_read_memory_fuzzerJay Berkenbilt
2019-06-15As a test suite, run stand-alone fuzzer on seed corpusJay Berkenbilt
Temporarily skip fuzz tests on Windows. There are Windows-specific failures to address later.
2019-06-15Populate seed corpusJay Berkenbilt
2019-06-15Add corpus from previous fuzzerJay Berkenbilt
This is the set of files from the latest corpus of running the older fuzzer (qpdf_read_memory_fuzzer) at the time of adding the new fuzzer (qpdf_fuzzer) after running a merge operation to minimize the corpus.
2019-06-15Implement fuzzer with good coverageJay Berkenbilt
2019-06-14oss-fuzz-build: support branch switchingJay Berkenbilt
2019-06-13oss-fuzz initial integrationJay Berkenbilt