src/test/fuzz/script_parsing.cpp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

// Copyright (c) 2019-2020 The Bitcoin Core developers
// Distributed under the MIT software license, see the accompanying
// file COPYING or http://www.opensource.org/licenses/mit-license.php.

#include <script/parsing.h>
#include <test/fuzz/FuzzedDataProvider.h>
#include <test/fuzz/fuzz.h>
#include <util/string.h>

using util::Split;

FUZZ_TARGET(script_parsing)
{
    FuzzedDataProvider fuzzed_data_provider(buffer.data(), buffer.size());
    const size_t query_size = fuzzed_data_provider.ConsumeIntegral<size_t>();
    const std::string query = fuzzed_data_provider.ConsumeBytesAsString(std::min<size_t>(query_size, 1024 * 1024));
    const std::string span_str = fuzzed_data_provider.ConsumeRemainingBytesAsString();
    const Span<const char> const_span{span_str};

    Span<const char> mut_span = const_span;
    (void)script::Const(query, mut_span);

    mut_span = const_span;
    (void)script::Func(query, mut_span);

    mut_span = const_span;
    (void)script::Expr(mut_span);

    if (!query.empty()) {
        mut_span = const_span;
        (void)Split(mut_span, query.front());
    }
}