add some new ppd fuzzers (test)

Author: pushinl

projects/cups/fuzzer/fuzz_ppd_gen_cache.c

@@ -0,0 +1,60 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include "ppd.h"
+#include "cups.h"
+#include "ipp.h"
+#include "file-private.h"
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
+{
+    // Create a temporary file to simulate a PPD file
+    char filename[256];
+    snprintf(filename, sizeof(filename), "/tmp/fuzz_ppd_%d.ppd", getpid());
+    FILE *file = fopen(filename, "wb");
+    if (!file)
+        return 0;
+    fwrite(data, 1, size, file);
+    fclose(file);
+
+    // Open the PPD file
+    ppd_file_t *ppd = ppdOpenFile(filename);
+    if (!ppd)
+    {
+        remove(filename);
+        return 0;
+    }
+
+    // Create a cache with the PPD
+    ipp_t *attrs = ippNew(); // Create a new IPP attributes object
+    _ppd_cache_t *cache = _ppdCacheCreateWithPPD(attrs, ppd);
+    if (cache)
+    {
+        // Optionally write the cache to a file
+        char cache_filename[256];
+        snprintf(cache_filename, sizeof(cache_filename), "/tmp/fuzz_cache_%d.cache", getpid());
+        _ppdCacheWriteFile(cache, cache_filename, attrs);
+
+        // Retrieve data from the cache
+        _ppdCacheGetBin(cache, "output-bin");
+        int exact;
+        _ppdCacheGetPageSize(cache, attrs, "page-size", &exact);
+
+        // Destroy the cache
+        _ppdCacheDestroy(cache);
+
+        // Clean up the cache file
+        remove(cache_filename);
+    }
+
+    // Clean up IPP attributes
+    ippDelete(attrs);
+
+    // Close the PPD file
+    ppdClose(ppd);
+
+    // Remove the temporary PPD file
+    remove(filename);
+
+    return 0;
+}

projects/cups/fuzzer/fuzz_ppd_gen_conflicts.c

@@ -0,0 +1,54 @@
+#include <stdint.h>
+#include <stddef.h>
+#include "ppd.h"
+#include "cups.h"
+#include "file-private.h"
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+    // Create a temporary file name using process id to avoid conflicts
+    char filename[256];
+    snprintf(filename, sizeof(filename), "/tmp/fuzz_ppd_%d.ppd", getpid());
+
+    // Write the data to a temporary file
+    FILE *file = fopen(filename, "wb");
+    if (!file) {
+        return 0;
+    }
+    fwrite(data, 1, size, file);
+    fclose(file);
+
+    // Open the PPD file
+    ppd_file_t *ppd = ppdOpenFile(filename);
+    if (!ppd) {
+        remove(filename);
+        return 0;
+    }
+
+    // Check for conflicts
+    ppdConflicts(ppd);
+
+    // Parse options from a sample string
+    cups_option_t *options = NULL;
+    int num_options = cupsParseOptions("SampleOption=SampleValue", 0, &options);
+
+    // Mark options in the PPD file
+    cupsMarkOptions(ppd, num_options, options);
+
+    // Check for conflicts with specific options and choices
+    cupsGetConflicts(ppd, "SampleOption", "SampleChoice", &options);
+
+    // Resolve conflicts with specific options and choices
+    int num_resolved_options = num_options;
+    cupsResolveConflicts(ppd, "SampleOption", "SampleChoice", &num_resolved_options, &options);
+
+    // Free options
+    cupsFreeOptions(num_options, options);
+
+    // Close the PPD file
+    ppdClose(ppd);
+
+    // Remove the temporary file
+    remove(filename);
+
+    return 0;
+}

projects/cups/fuzzer/fuzz_ppd_gen_options.c

@@ -0,0 +1,58 @@
+#include <stdint.h>
+#include <stddef.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include "ppd.h"
+#include "cups.h"
+#include "file-private.h"
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+    if (size < 1) return 0; // Ensure there is at least some data
+
+    // Use process ID to create a unique temporary filename
+    char filename[256];
+    snprintf(filename, sizeof(filename), "/tmp/fuzz_ppd_%d.ppd", getpid());
+
+    // Write the fuzz data to a temporary file
+    FILE *file = fopen(filename, "wb");
+    if (!file) return 0;
+    fwrite(data, 1, size, file);
+    fclose(file);
+
+    // Attempt to open the PPD file
+    ppd_file_t *ppd = ppdOpenFile(filename);
+    if (ppd) {
+        // Fuzz ppdMarkOption
+        if (size > 2) {
+            ppdMarkOption(ppd, (const char *)data, (const char *)(data + 1));
+        }
+
+        // Fuzz ppdFindMarkedChoice
+        if (size > 3) {
+            ppdFindMarkedChoice(ppd, (const char *)(data + 2));
+        }
+
+        // Fuzz ppdInstallableConflict
+        if (size > 4) {
+            ppdInstallableConflict(ppd, (const char *)(data + 3), (const char *)(data + 4));
+        }
+
+        // Close the PPD file
+        ppdClose(ppd);
+    }
+
+    // Fuzz cupsGetOption
+    if (size > 5) {
+        cups_option_t options[1];
+        options[0].name = (char *)data;
+        options[0].value = (char *)(data + 1);
+        cupsGetOption((const char *)(data + 5), 1, options);
+    }
+
+    // Clean up the temporary file
+    unlink(filename);
+
+    return 0;
+}