| // Copyright 2021, The Android Open Source Project |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| #![allow(missing_docs)] |
| #![no_main] |
| #[macro_use] extern crate libfuzzer_sys; |
| |
| fn heap_oob() { |
| let xs = vec![0, 1, 2, 3]; |
| let val = unsafe { *xs.as_ptr().offset(4) }; |
| println!("Out-of-bounds heap value: {}", val); |
| } |
| |
| fuzz_target!(|data: &[u8]| { |
| let magic_number = 327; |
| if data.len() == magic_number { |
| heap_oob(); |
| } |
| }); |
