// This file is distributed under the University of Illinois Open Source // License. See LICENSE.TXT for details. // Find ABCxxFxUxZxxx... (2048+ bytes, 'x' is any byte) #include #include #include #include #include #include const size_t N = 2048; typedef const uint8_t *IN; static volatile int one = 1; extern "C" { __attribute__((noinline)) void bad() { fprintf(stderr, "BINGO\n"); if (one) abort(); } __attribute__((noinline)) void f0(IN in) { uint32_t x = in[5] + 251 * in[7] + 251 * 251 * in[9]; if (x == 'F' + 251 * 'U' + 251 * 251 * 'Z') bad(); } __attribute__((noinline)) void fC(IN in) { if (in[2] == 'C') f0(in); } __attribute__((noinline)) void fB(IN in) { if (in[1] == 'B') fC(in); } __attribute__((noinline)) void fA(IN in) { if (in[0] == 'A') fB(in); } } // extern "C" extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { if (Size < N) return 0; fA((IN)Data); return 0; }