mirror of
https://github.com/xroche/httrack.git
synced 2026-07-23 17:19:17 +03:00
092a557305
strjoker_rec charged its work budget only after the depth-cap early-return, so depth-capped recursive calls cost nothing. A class pattern like *[a]*[a]... drives recursion to STRJOKER_MAXDEPTH, sets the sticky cut flag (disabling the failure memo), and the band below the cap then re-explores exponentially without ever tripping the budget — a ~2KB filter ran ~80s under ASan. Moving the increment ahead of the depth-cap return makes every call count, bounding total work; the match fails safe. Behavior is unchanged for real filters. Adds a fuzzer corpus regression seed and a class-branch lower-bound pin to the filterbounds self-test.
51 lines
2.1 KiB
Makefile
51 lines
2.1 KiB
Makefile
# libFuzzer harnesses; built only with --enable-fuzzers (requires clang).
|
|
if FUZZERS
|
|
noinst_PROGRAMS = fuzz-charset fuzz-meta fuzz-idna fuzz-entities \
|
|
fuzz-unescape fuzz-filters fuzz-url fuzz-header fuzz-cachendx \
|
|
fuzz-htsparse
|
|
endif
|
|
|
|
AM_CPPFLAGS = \
|
|
@DEFAULT_CFLAGS@ \
|
|
@THREADS_CFLAGS@ \
|
|
@V6_FLAG@ \
|
|
@LFS_FLAG@ \
|
|
-I$(top_srcdir)/src \
|
|
-I$(top_srcdir)/src/coucal
|
|
|
|
# Static-link libhttrack.la: the internal symbols are hidden in the .so.
|
|
AM_LDFLAGS = @DEFAULT_LDFLAGS@ -fsanitize=fuzzer -static-libtool-libs
|
|
LDADD = $(top_builddir)/src/libhttrack.la $(THREADS_LIBS)
|
|
|
|
fuzz_charset_SOURCES = fuzz-charset.c fuzz.h
|
|
fuzz_meta_SOURCES = fuzz-meta.c fuzz.h
|
|
fuzz_idna_SOURCES = fuzz-idna.c fuzz.h
|
|
fuzz_entities_SOURCES = fuzz-entities.c fuzz.h
|
|
fuzz_unescape_SOURCES = fuzz-unescape.c fuzz.h
|
|
fuzz_filters_SOURCES = fuzz-filters.c fuzz.h
|
|
fuzz_url_SOURCES = fuzz-url.c fuzz.h
|
|
fuzz_header_SOURCES = fuzz-header.c fuzz.h
|
|
fuzz_cachendx_SOURCES = fuzz-cachendx.c fuzz.h
|
|
fuzz_htsparse_SOURCES = fuzz-htsparse.c fuzz.h
|
|
|
|
# List corpus files explicitly: automake does not expand EXTRA_DIST globs.
|
|
EXTRA_DIST = README.md run-fuzzers.sh \
|
|
corpus/charset/utf8.txt corpus/charset/latin1.txt corpus/charset/sjis.txt \
|
|
corpus/meta/meta-charset.html corpus/meta/meta-http-equiv.html \
|
|
corpus/idna/idna.txt corpus/idna/unicode.txt \
|
|
corpus/idna/regress-multilabel-leak.txt \
|
|
corpus/entities/entities.txt \
|
|
corpus/unescape/percent.txt \
|
|
corpus/filters/filter.bin corpus/filters/filter-size.bin \
|
|
corpus/filters/regress-empty-subject-unique.bin \
|
|
corpus/filters/redos-star-classes.bin \
|
|
corpus/filters/regress-classdepth-timeout.bin \
|
|
corpus/url/http-url.txt corpus/url/relative-path.txt \
|
|
corpus/url/regress-file-empty-path.txt corpus/url/regress-long-path-abort.txt \
|
|
corpus/header/full-response.txt corpus/header/redirect.txt \
|
|
corpus/cachendx/new-format.txt corpus/cachendx/old-format.txt \
|
|
corpus/cachendx/regress-overadvance.bin \
|
|
corpus/cachendx/regress-truncated-entry.bin \
|
|
corpus/htsparse/basic.html corpus/htsparse/script-inscript.html \
|
|
corpus/htsparse/meta-usemap.html corpus/htsparse/malformed.html
|