Tests/Fuzzing/cmPkgConfigParserFuzzer.cxx

/* Distributed under the OSI-approved BSD 3-Clause License.  See accompanying
   file LICENSE.rst or https://cmake.org/licensing for details.  */

/*
 * Fuzzer for CMake's pkg-config file parser
 *
 * CMake parses .pc files (pkg-config) when using PkgConfig find module.
 * Malformed .pc files from untrusted sources could trigger vulnerabilities.
 *
 * Coverage targets:
 * - Variable definitions (key=value)
 * - Keyword definitions (key: value)
 * - Variable references (${var})
 * - Multi-line handling
 * - Comment handling
 */

#include <cstddef>
#include <cstdint>
#include <string>
#include <vector>

#include "cmPkgConfigParser.h"

// Limit input size
static constexpr size_t kMaxInputSize = 64 * 1024; // 64KB

extern "C" int LLVMFuzzerTestOneInput(uint8_t const* data, size_t size)
{
  if (size == 0 || size > kMaxInputSize) {
    return 0;
  }

  // cmPkgConfigParser::Parse takes non-const buffer (may modify in place)
  std::vector<char> buffer(data, data + size);

  cmPkgConfigParser parser;

  // Parse the input
  auto result = parser.Parse(buffer.data(), buffer.size());
  (void)result;

  // Finish parsing
  result = parser.Finish();
  (void)result;

  parser.ParseComplete();

  (void)parser.GetLiteral("Name");
  (void)parser.GetLiteral("Description");
  (void)parser.GetLiteral("Version");
  (void)parser.GetFragments("Cflags");
  (void)parser.GetFragments("Cflags.private");
  (void)parser.GetFragments("CFlags");
  (void)parser.GetFragments("CFlags.private");
  (void)parser.GetFragments("Libs");
  (void)parser.GetFragments("Libs.private");
  (void)parser.GetDependencies("Requires");
  (void)parser.GetDependencies("Requires.private");
  (void)parser.GetDependencies("Conflicts");
  (void)parser.GetDependencies("Provides");

  return 0;
}