aboutsummaryrefslogtreecommitdiffstats
path: root/capstone/suite/fuzz/drivermc.c
diff options
context:
space:
mode:
authorAngelos Mouzakitis <a.mouzakitis@virtualopensystems.com>2023-10-10 14:33:42 +0000
committerAngelos Mouzakitis <a.mouzakitis@virtualopensystems.com>2023-10-10 14:33:42 +0000
commitaf1a266670d040d2f4083ff309d732d648afba2a (patch)
tree2fc46203448ddcc6f81546d379abfaeb323575e9 /capstone/suite/fuzz/drivermc.c
parente02cda008591317b1625707ff8e115a4841aa889 (diff)
Add submodule dependency filesHEADmaster
Change-Id: Iaf8d18082d3991dec7c0ebbea540f092188eb4ec
Diffstat (limited to 'capstone/suite/fuzz/drivermc.c')
-rw-r--r--capstone/suite/fuzz/drivermc.c138
1 files changed, 138 insertions, 0 deletions
diff --git a/capstone/suite/fuzz/drivermc.c b/capstone/suite/fuzz/drivermc.c
new file mode 100644
index 000000000..ff31ebdee
--- /dev/null
+++ b/capstone/suite/fuzz/drivermc.c
@@ -0,0 +1,138 @@
+#include <stdint.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <string.h>
+
+int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size);
+
+#define MAX_INSTR_SIZE 64
+#define MAX_LINE_SIZE 128
+
+int main(int argc, char** argv)
+{
+ FILE * fp;
+ uint8_t Data[MAX_INSTR_SIZE];
+ char line[MAX_LINE_SIZE];
+ size_t Size;
+ char arch[MAX_LINE_SIZE];
+ char mode[MAX_LINE_SIZE];
+ unsigned int value;
+ int i;
+
+ if (argc < 2) {
+ return 1;
+ }
+ for (i = 1; i < argc; i++) {
+ //opens the file, get its size, and reads it into a buffer
+ fp = fopen(argv[i], "rb");
+ if (fp == NULL) {
+ return 2;
+ }
+ printf("Trying %s\n", argv[i]);
+ if (fgets(line, MAX_LINE_SIZE, fp) == NULL) {
+ break;
+ }
+ if (line[0] == '#') {
+ if (sscanf(line, "# %[^,], %[^,]", arch, mode) != 2) {
+ printf("Wrong mode %s\n", line);
+ return 1;
+ }
+ if (strcmp(arch, "CS_ARCH_X86") == 0 && strcmp(mode, "CS_MODE_32") == 0) {
+ Data[0] = 0;
+ } else if (strcmp(arch, "CS_ARCH_X86") == 0 && strcmp(mode, "CS_MODE_64") == 0) {
+ Data[0] = 1;
+ } else if (strcmp(arch, "CS_ARCH_ARM") == 0 && strcmp(mode, "CS_MODE_ARM") == 0) {
+ Data[0] = 2;
+ } else if (strcmp(arch, "CS_ARCH_ARM") == 0 && strcmp(mode, "CS_MODE_THUMB") == 0) {
+ Data[0] = 3;
+ } else if (strcmp(arch, "CS_ARCH_ARM") == 0 && strcmp(mode, "CS_MODE_ARM+CS_MODE_V8") == 0) {
+ Data[0] = 4;
+ } else if (strcmp(arch, "CS_ARCH_ARM") == 0 && strcmp(mode, "CS_MODE_THUMB+CS_MODE_V8") == 0) {
+ Data[0] = 5;
+ } else if (strcmp(arch, "CS_ARCH_ARM") == 0 && strcmp(mode, "CS_MODE_THUMB+CS_MODE_MCLASS") == 0) {
+ Data[0] = 6;
+ } else if (strcmp(arch, "CS_ARCH_ARM64") == 0 && strcmp(mode, "0") == 0) {
+ Data[0] = 7;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32+CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 8;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32+CS_MODE_MICRO") == 0) {
+ Data[0] = 9;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS64") == 0) {
+ Data[0] = 10;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32") == 0) {
+ Data[0] = 11;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS64+CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 12;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32+CS_MODE_MICRO+CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 13;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32+CS_MODE_BIG_ENDIAN+CS_MODE_MICRO") == 0) {
+ Data[0] = 13;
+ } else if (strcmp(arch, "CS_ARCH_PPC") == 0 && strcmp(mode, "CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 14;
+ } else if (strcmp(arch, "CS_ARCH_SPARC") == 0 && strcmp(mode, "CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 15;
+ } else if (strcmp(arch, "CS_ARCH_SPARC") == 0 && strcmp(mode, "CS_MODE_BIG_ENDIAN + CS_MODE_V9") == 0) {
+ Data[0] = 16;
+ } else if (strcmp(arch, "CS_ARCH_SYSZ") == 0 && strcmp(mode, "0") == 0) {
+ Data[0] = 17;
+ } else if (strcmp(arch, "CS_ARCH_XCORE") == 0 && strcmp(mode, "0") == 0) {
+ Data[0] = 18;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32R6+CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 19;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32R6+CS_MODE_MICRO+CS_MODE_BIG_ENDIAN") == 0) {
+ Data[0] = 20;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32R6") == 0) {
+ Data[0] = 21;
+ } else if (strcmp(arch, "CS_ARCH_MIPS") == 0 && strcmp(mode, "CS_MODE_MIPS32R6+CS_MODE_MICRO") == 0) {
+ Data[0] = 22;
+ } else if (strcmp(arch, "CS_ARCH_M68K") == 0 && strcmp(mode, "0") == 0) {
+ Data[0] = 23;
+ } else if (strcmp(arch, "CS_ARCH_M680X") == 0 && strcmp(mode, "CS_MODE_M680X_6809") == 0) {
+ Data[0] = 24;
+ } else if (strcmp(arch, "CS_ARCH_EVM") == 0 && strcmp(mode, "0") == 0) {
+ Data[0] = 25;
+ } else if (strcmp(arch, "CS_ARCH_BPF") == 0 && strstr(mode, "CS_MODE_BPF_CLASSIC") != NULL) {
+ Data[0] = 29;
+ } else if (strcmp(arch, "CS_ARCH_BPF") == 0 && strstr(mode, "CS_MODE_BPF_EXTENDED") != NULL) {
+ Data[0] = 30;
+ } else if (strcmp(arch, "CS_ARCH_RISCV") == 0 && strcmp(mode, "CS_MODE_RISCV32") == 0) {
+ Data[0] = 44;
+ } else if (strcmp(arch, "CS_ARCH_RISCV") == 0 && strcmp(mode, "CS_MODE_RISCV64") == 0) {
+ Data[0] = 45;
+ } else {
+ printf("Unknown mode\n");
+ //fail instead of continue
+ return 1;
+ }
+ } else {
+ printf("No mode\n");
+ //fail instead of continue
+ return 1;
+ }
+
+ while(1) {
+ if (fgets(line, MAX_LINE_SIZE, fp) == NULL) {
+ break;
+ }
+ Size = 1;
+ // we start line at offset 0 and Data buffer at offset 1
+ // since Data[0] is option : arch + mode
+ while (sscanf(line+(Size-1)*5, "0x%02x", &value) == 1) {
+ Data[Size] = value;
+ Size++;
+ if (line[(Size-1)*5-1] != ',') {
+ //end of pattern
+ break;
+ } else if (MAX_LINE_SIZE < (Size-1)*5) {
+ printf("Line overflow\n");
+ return 1;
+ }
+ }
+ //lauch fuzzer
+ LLVMFuzzerTestOneInput(Data, Size);
+ }
+ fclose(fp);
+ }
+ return 0;
+}
+