facebook/zstd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #2075 from bimbashrestha/dict_fuzzer_ref

Browse Source 
[bug] handling case where prefix is NULL or 0 sized in refPrefix_advanced
This commit is contained in:
Bimba Shrestha 2020-04-07 17:37:19 -05:00 committed by GitHub
commit c0d4b2b5a3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 21 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/compress/zstd_compress.c
View File

@ -945,9 +945,11 @@ size_t ZSTD_CCtx_refPrefix_advanced(
{ {
RETURN_ERROR_IF(cctx->streamStage != zcss_init, stage_wrong); RETURN_ERROR_IF(cctx->streamStage != zcss_init, stage_wrong);
ZSTD_clearAllDicts(cctx); ZSTD_clearAllDicts(cctx);
cctx->prefixDict.dict = prefix; if (prefix != NULL && prefixSize > 0) {
cctx->prefixDict.dictSize = prefixSize; cctx->prefixDict.dict = prefix;
cctx->prefixDict.dictContentType = dictContentType; cctx->prefixDict.dictSize = prefixSize;
cctx->prefixDict.dictContentType = dictContentType;
}
return 0; return 0;
} }

21
tests/fuzz/dictionary_round_trip.c
View File

@ -32,6 +32,7 @@ static size_t roundTripTest(void *result, size_t resultCapacity,
{ {
ZSTD_dictContentType_e dictContentType = ZSTD_dct_auto; ZSTD_dictContentType_e dictContentType = ZSTD_dct_auto;
FUZZ_dict_t dict = FUZZ_train(src, srcSize, producer); FUZZ_dict_t dict = FUZZ_train(src, srcSize, producer);
int const refPrefix = FUZZ_dataProducer_uint32Range(producer, 0, 1) != 0;
size_t cSize; size_t cSize;
if (FUZZ_dataProducer_uint32Range(producer, 0, 15) == 0) { if (FUZZ_dataProducer_uint32Range(producer, 0, 15) == 0) {
int const cLevel = FUZZ_dataProducer_int32Range(producer, kMinClevel, kMaxClevel); int const cLevel = FUZZ_dataProducer_int32Range(producer, kMinClevel, kMaxClevel);
@ -46,17 +47,27 @@ static size_t roundTripTest(void *result, size_t resultCapacity,
FUZZ_setRandomParameters(cctx, srcSize, producer); FUZZ_setRandomParameters(cctx, srcSize, producer);
/* Disable checksum so we can use sizes smaller than compress bound. */ /* Disable checksum so we can use sizes smaller than compress bound. */
FUZZ_ZASSERT(ZSTD_CCtx_setParameter(cctx, ZSTD_c_checksumFlag, 0)); FUZZ_ZASSERT(ZSTD_CCtx_setParameter(cctx, ZSTD_c_checksumFlag, 0));
FUZZ_ZASSERT(ZSTD_CCtx_loadDictionary_advanced( if (refPrefix)
FUZZ_ZASSERT(ZSTD_CCtx_refPrefix_advanced(
cctx, dict.buff, dict.size,
dictContentType));
else
FUZZ_ZASSERT(ZSTD_CCtx_loadDictionary_advanced(
cctx, dict.buff, dict.size, cctx, dict.buff, dict.size,
(ZSTD_dictLoadMethod_e)FUZZ_dataProducer_uint32Range(producer, 0, 1), (ZSTD_dictLoadMethod_e)FUZZ_dataProducer_uint32Range(producer, 0, 1),
dictContentType)); dictContentType));
cSize = ZSTD_compress2(cctx, compressed, compressedCapacity, src, srcSize); cSize = ZSTD_compress2(cctx, compressed, compressedCapacity, src, srcSize);
} }
FUZZ_ZASSERT(cSize); FUZZ_ZASSERT(cSize);
FUZZ_ZASSERT(ZSTD_DCtx_loadDictionary_advanced( if (refPrefix)
dctx, dict.buff, dict.size, FUZZ_ZASSERT(ZSTD_DCtx_refPrefix_advanced(
(ZSTD_dictLoadMethod_e)FUZZ_dataProducer_uint32Range(producer, 0, 1), dctx, dict.buff, dict.size,
dictContentType)); dictContentType));
else
FUZZ_ZASSERT(ZSTD_DCtx_loadDictionary_advanced(
dctx, dict.buff, dict.size,
(ZSTD_dictLoadMethod_e)FUZZ_dataProducer_uint32Range(producer, 0, 1),
dictContentType));
{ {
size_t const ret = ZSTD_decompressDCtx( size_t const ret = ZSTD_decompressDCtx(
dctx, result, resultCapacity, compressed, cSize); dctx, result, resultCapacity, compressed, cSize);