// Copyright (c) 2019, Paul Dreik // For the license information refer to format.h. #include #include #include #include "fuzzer-common.h" template const T* from_repr(const Repr& r) { return &r; } template <> const std::tm* from_repr(const std::time_t& t) { return std::localtime(&t); } template void invoke_fmt(const uint8_t* data, size_t size) { static_assert(sizeof(Repr) <= fixed_size, "Nfixed is too small"); if (size <= fixed_size) return; auto repr = assign_from_buf(data); const T* value = from_repr(repr); if (!value) return; data += fixed_size; size -= fixed_size; data_to_string format_str(data, size); #if FMT_FUZZ_FORMAT_TO_STRING std::string message = fmt::format(format_str.get(), *value); #else fmt::memory_buffer message; fmt::format_to(message, format_str.get(), *value); #endif } extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { if (size <= 3) return 0; const auto first = data[0]; data++; size--; try { switch (first) { case 0: invoke_fmt(data, size); break; case 1: invoke_fmt(data, size); break; case 2: invoke_fmt(data, size); break; case 3: invoke_fmt(data, size); break; case 4: invoke_fmt(data, size); break; case 5: invoke_fmt(data, size); break; case 6: invoke_fmt(data, size); break; case 7: invoke_fmt(data, size); break; case 8: invoke_fmt(data, size); break; case 9: invoke_fmt(data, size); break; case 10: invoke_fmt(data, size); break; case 11: invoke_fmt(data, size); break; case 12: invoke_fmt(data, size); break; case 13: invoke_fmt(data, size); break; default: break; } } catch (std::exception&) { } return 0; }