diff --git a/libsparse/Android.bp b/libsparse/Android.bp index 2ec47541b..88146e998 100644 --- a/libsparse/Android.bp +++ b/libsparse/Android.bp @@ -82,3 +82,15 @@ python_binary_host { }, }, } + +cc_fuzz { + name: "sparse_fuzzer", + host_supported: false, + srcs: [ + "sparse_fuzzer.cpp", + ], + static_libs: [ + "libsparse", + "liblog", + ], +} diff --git a/libsparse/sparse_fuzzer.cpp b/libsparse/sparse_fuzzer.cpp new file mode 100644 index 000000000..42f331fc3 --- /dev/null +++ b/libsparse/sparse_fuzzer.cpp @@ -0,0 +1,16 @@ +#include "include/sparse/sparse.h" + +extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { + if (size < 2 * sizeof(wchar_t)) return 0; + + int64_t blocksize = 4096; + struct sparse_file* file = sparse_file_new(size, blocksize); + if (!file) { + return 0; + } + + unsigned int block = 1; + sparse_file_add_data(file, &data, size, block); + sparse_file_destroy(file); + return 0; +}