From 225354290d52d700b98f4849b6a3836c16534337 Mon Sep 17 00:00:00 2001 From: Randy Date: Tue, 24 Nov 2020 17:00:05 +0100 Subject: [PATCH] revert uncompress_fuzzer changes --- tests/uncompress_fuzzer.c | 15 ++++++--------- 1 file changed, 6 insertions(+), 9 deletions(-) diff --git a/tests/uncompress_fuzzer.c b/tests/uncompress_fuzzer.c index 96015bc..933ff69 100644 --- a/tests/uncompress_fuzzer.c +++ b/tests/uncompress_fuzzer.c @@ -10,21 +10,18 @@ int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { - unsigned long int buffer_length; + unsigned long int buffer_length = 1; unsigned char *buffer = NULL; int z_status = 0; - if(size > 4) return 0; - - uint32_t n; - memcpy(&n, data, 4); - buffer_length = n; - - if(buffer_length > (1024 * 256)) return 0; + if (size > 0) + buffer_length *= data[0]; + if (size > 1) + buffer_length *= data[1]; buffer = (unsigned char *)malloc(buffer_length); - z_status = uncompress(buffer, &buffer_length, data + 4, size - 4); + z_status = uncompress(buffer, &buffer_length, data, size); free(buffer); if (Z_OK != z_status)