mirror of
https://gitlab.gnome.org/GNOME/libxml2.git
synced 2025-01-04 05:17:37 +03:00
6f1470a5d6
Always limit nested functions calls to 5000. This avoids call stack overflows with deeply nested expressions. The expression parser produces about 10 nested function calls when parsing a subexpression in parentheses, so the effective nesting limit is about 500 which should be more than enough. Use a lower limit when fuzzing to account for increased memory usage when using sanitizers. |
||
|---|---|---|
| .. | ||
| seed | ||
| .gitignore | ||
| fuzz.c | ||
| fuzz.h | ||
| genSeed.c | ||
| html.c | ||
| html.dict | ||
| html.options | ||
| Makefile.am | ||
| README | ||
| regexp.c | ||
| regexp.dict | ||
| regexp.options | ||
| schema.c | ||
| schema.dict | ||
| schema.options | ||
| testFuzzer.c | ||
| uri.c | ||
| uri.options | ||
| xml.c | ||
| xml.dict | ||
| xml.options | ||
| xpath.c | ||
| xpath.dict | ||
| xpath.options | ||
libFuzzer instructions for libxml2
==================================
Set compiler and options:
export CC=clang
export CFLAGS="-g -fsanitize=fuzzer-no-link,address,undefined \
-fno-sanitize-recover=all \
-DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION"
Build libxml2 with instrumentation:
./configure --without-python
make
Run fuzzers:
make -C fuzz fuzz-xml