From 4c9acd103b0519aa1e5b6d1b2d645fcf66010dcb Mon Sep 17 00:00:00 2001
From: Robert Loehning <robert.loehning@qt.io>
Date: Fri, 15 May 2020 21:21:29 +0200
Subject: Fuzzing: Add fuzz target for QImage::loadFromData

Pick-to: 5.15
Change-Id: Ie67eb9be80fe42d463c566c728c73c9c92c2081b
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Reviewed-by: Albert Astals Cid <albert.astals.cid@kdab.com>
---
 .../gui/image/qimage/loadfromdata/loadfromdata.pro |  9 +++++
 .../gui/image/qimage/loadfromdata/main.cpp         | 46 ++++++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 tests/libfuzzer/gui/image/qimage/loadfromdata/loadfromdata.pro
 create mode 100644 tests/libfuzzer/gui/image/qimage/loadfromdata/main.cpp

(limited to 'tests')

diff --git a/tests/libfuzzer/gui/image/qimage/loadfromdata/loadfromdata.pro b/tests/libfuzzer/gui/image/qimage/loadfromdata/loadfromdata.pro
new file mode 100644
index 0000000000..bed2198e0d
--- /dev/null
+++ b/tests/libfuzzer/gui/image/qimage/loadfromdata/loadfromdata.pro
@@ -0,0 +1,9 @@
+QT += gui
+QTPLUGIN *= qminimal
+SOURCES += main.cpp
+FUZZ_ENGINE = $$(LIB_FUZZING_ENGINE)
+isEmpty(FUZZ_ENGINE) {
+    QMAKE_LFLAGS += -fsanitize=fuzzer
+} else {
+    LIBS += $$FUZZ_ENGINE
+}
diff --git a/tests/libfuzzer/gui/image/qimage/loadfromdata/main.cpp b/tests/libfuzzer/gui/image/qimage/loadfromdata/main.cpp
new file mode 100644
index 0000000000..46d48ebf8c
--- /dev/null
+++ b/tests/libfuzzer/gui/image/qimage/loadfromdata/main.cpp
@@ -0,0 +1,46 @@
+/****************************************************************************
+**
+** Copyright (C) 2020 The Qt Company Ltd.
+** Contact: https://www.qt.io/licensing/
+**
+** This file is part of the test suite of the Qt Toolkit.
+**
+** $QT_BEGIN_LICENSE:GPL-EXCEPT$
+** Commercial License Usage
+** Licensees holding valid commercial Qt licenses may use this file in
+** accordance with the commercial license agreement provided with the
+** Software or, alternatively, in accordance with the terms contained in
+** a written agreement between you and The Qt Company. For licensing terms
+** and conditions see https://www.qt.io/terms-conditions. For further
+** information use the contact form at https://www.qt.io/contact-us.
+**
+** GNU General Public License Usage
+** Alternatively, this file may be used under the terms of the GNU
+** General Public License version 3 as published by the Free Software
+** Foundation with exceptions as appearing in the file LICENSE.GPL3-EXCEPT
+** included in the packaging of this file. Please review the following
+** information to ensure the GNU General Public License requirements will
+** be met: https://www.gnu.org/licenses/gpl-3.0.html.
+**
+** $QT_END_LICENSE$
+**
+****************************************************************************/
+
+#include <QGuiApplication>
+#include <QImage>
+#include <QtGlobal>
+
+// silence warnings
+static QtMessageHandler mh = qInstallMessageHandler([](QtMsgType, const QMessageLogContext &,
+                                                       const QString &) {});
+
+extern "C" int LLVMFuzzerTestOneInput(const char *Data, size_t Size) {
+    static int argc = 3;
+    static char arg1[] = "fuzzer";
+    static char arg2[] = "-platform";
+    static char arg3[] = "minimal";
+    static char *argv[] = {arg1, arg2, arg3, nullptr};
+    static QGuiApplication qga(argc, argv);
+    QImage().loadFromData(QByteArray::fromRawData(Data, Size));
+    return 0;
+}
-- 
cgit v1.2.3