Commit a20c9812 authored by Wenxiang Qian's avatar Wenxiang Qian Committed by Commit Bot

Add sqlite3_shadow_table_fuzzer

This fuzzer will test sqlite3 FTS3 shadow tables and related functions
by implementing a custom structure aware fuzzing. It will try to
generate some grammatical correct queries to manipulate shadow tables,
or to execute some built-in functions of FTS3 to find memory corruption
vulnerabilities.

Bug: 1025467
Change-Id: I809fe02efd43449bee8a072e490309175e533d6f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1924174
Commit-Queue: Matthew Denton <mpdenton@chromium.org>
Reviewed-by: default avatarMatthew Denton <mpdenton@chromium.org>
Reviewed-by: default avatarMax Moroz <mmoroz@chromium.org>
Reviewed-by: default avatarDarwin Huang <huangdarwin@chromium.org>
Cr-Commit-Position: refs/heads/master@{#719107}
parent 65c32b57
...@@ -1109,3 +1109,4 @@ Vivaldi Technologies AS <*@vivaldi.com> ...@@ -1109,3 +1109,4 @@ Vivaldi Technologies AS <*@vivaldi.com>
Yandex LLC <*@yandex-team.ru> Yandex LLC <*@yandex-team.ru>
Make Positive Provar Limited <*@provartesting.com> Make Positive Provar Limited <*@provartesting.com>
Jiaxun Wei <leuisken@gmail.com> Jiaxun Wei <leuisken@gmail.com>
Wenxiang Qian <leonwxqian@gmail.com>
...@@ -493,6 +493,19 @@ fuzzer_test("sqlite3_fts3_lpm_fuzzer") { ...@@ -493,6 +493,19 @@ fuzzer_test("sqlite3_fts3_lpm_fuzzer") {
] ]
} }
fuzzer_test("sqlite3_shadow_table_fuzzer") {
sources = [
"fuzz/shadow_table_fuzzer.cc",
]
deps = [
":sqlite",
]
additional_configs = [
":sqlite_warnings",
]
}
fuzzer_test("sqlite3_select_printf_lpm_fuzzer") { fuzzer_test("sqlite3_select_printf_lpm_fuzzer") {
sources = [ sources = [
"fuzz/sql_printf_fuzzer.cc", "fuzz/sql_printf_fuzzer.cc",
......
This diff is collapsed.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment