798e98c47b
* Update hb-ot-cff-common.hh * fix bug * bummer fix wasn't hit. refix * additional sanity check * Added test cases for oss-fuzz issues 11805, 11806 |
||
---|---|---|
.. | ||
fonts | ||
CMakeLists.txt | ||
hb-fuzzer.hh | ||
hb-shape-fuzzer.cc | ||
hb-subset-fuzzer.cc | ||
main.cc | ||
Makefile.am | ||
README | ||
run-shape-fuzzer-tests.py | ||
run-subset-fuzzer-tests.py |
In order to build the fuzzer one needs to build HarfBuzz and harfbuzz/test/fuzzing/hb-fuzzer.cc with: - Using the most recent Clang - With -fsanitize=address (or =undefined, or a combination) - With -fsanitize-coverage=edge[,8bit-counters,trace-cmp] - With various defines that limit worst case exponential behavior. See FUZZING_CPPFLAGS in harfbuzz/src/Makefile.am for the list. - link against libFuzzer To run the fuzzer one needs to first obtain a test corpus as a directory containing interesting fonts. A good starting point is inside harfbuzz/test/shaping/fonts/fonts/. Then, run the fuzzer like this: ./hb-fuzzer -max_len=2048 CORPUS_DIR Where max_len specifies the maximal length of font files to handle. The smaller the faster. For more details consult the following locations: - http://llvm.org/docs/LibFuzzer.html or - https://github.com/google/libfuzzer-bot/tree/master/harfbuzz - https://github.com/harfbuzz/harfbuzz/issues/139