/
fuzz_target_1.rs
42 lines (40 loc) · 1.26 KB
/
fuzz_target_1.rs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
#![no_main]
#[macro_use] extern crate libfuzzer_sys;
use quick_xml::Reader;
use quick_xml::events::Event;
use std::io::Cursor;
fuzz_target!(|data: &[u8]| {
// fuzzed code goes here
let cursor = Cursor::new(data);
let mut reader = Reader::from_reader(cursor);
let mut buf = vec![];
loop {
match reader.read_event_into(&mut buf) {
Ok(Event::Start(ref e)) | Ok(Event::Empty(ref e))=> {
if e.unescaped().is_err() {
break;
}
for a in e.attributes() {
if a.ok().map_or(false, |a| a.unescaped_value().is_err()) {
break;
}
}
}
Ok(Event::Text(ref e)) | Ok(Event::Comment(ref e))
| Ok(Event::CData(ref e)) | Ok(Event::PI(ref e))
| Ok(Event::DocType(ref e)) => {
if e.unescaped().is_err() {
break;
}
}
Ok(Event::Decl(ref e)) => {
let _ = e.version();
let _ = e.encoding();
let _ = e.standalone();
}
Ok(Event::End(_)) => (),
Ok(Event::Eof) | Err(..) => break,
}
buf.clear();
}
});