// __ _____ _____ _____ // __| | __| | | | JSON for Modern C++ (supporting code) // | | |__ | | | | | | version 3.12.0 // |_____|_____|_____|_|___| https://github.com/nlohmann/json // // SPDX-FileCopyrightText: 2013-2026 Niels Lohmann // SPDX-License-Identifier: MIT /* This file implements a parser test suitable for fuzz testing. Given a byte array data, it performs the following steps: - j1 = from_cbor(data) - vec = to_cbor(j1) - j2 = from_cbor(vec) - assert(j1 == j2) Furthermore, it reads data with a SAX parser that recovers from every error and checks that the events are balanced, that reading ends, and that it reports an error exactly when from_cbor() fails (see #3989). The provided function `LLVMFuzzerTestOneInput` can be used in different fuzzer drivers. */ #include #include #include #include // the round-trip checks below are assertions; NDEBUG would compile them away #ifdef NDEBUG #error "the fuzzer drivers must be built without NDEBUG" #endif #include "fuzzer-recovering_checker.hpp" using json = nlohmann::json; // see http://llvm.org/docs/LibFuzzer.html extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { // step 0: recover from all errors, reading from memory and from a stream const bool recovered_without_errors = check_recovering_parse(data, size, json::input_format_t::cbor).errors == 0; try { // step 1: parse input std::vector const vec1(data, data + size); json const j1 = json::from_cbor(vec1); assert(recovered_without_errors); try { // step 2: round trip std::vector const vec2 = json::to_cbor(j1); // parse serialization json const j2 = json::from_cbor(vec2); // serializations must match assert(json::to_cbor(j2) == vec2); } catch (const json::parse_error&) { // parsing a CBOR serialization must not fail assert(false); } } catch (const json::parse_error&) { // parse errors are ok, because input may be random bytes assert(!recovered_without_errors); } catch (const json::type_error&) { // type errors can occur during parsing, too } catch (const json::out_of_range&) { // out of range errors can occur during parsing, too assert(!recovered_without_errors); } // return 0 - non-zero return values are reserved for future use return 0; }