ICU-22479 Add Fuzzer for ListFormat

unicode-org · Sep 19, 2023 · 6df1bab · 6df1bab
1 parent f3b869c
commit 6df1bab
Show file tree

Hide file tree

Showing 2 changed files with 61 additions and 1 deletion.
diff --git a/icu4c/source/test/fuzzer/Makefile.in b/icu4c/source/test/fuzzer/Makefile.in
@@ -33,7 +33,7 @@ CPPFLAGS += -I$(srcdir) -I$(top_srcdir)/common -I$(top_srcdir)/i18n -I$(top_srcd
 DEFS += -D'U_TOPSRCDIR="$(top_srcdir)/"' -D'U_TOPBUILDDIR="$(BUILDDIR)"'
 LIBS = $(LIBCTESTFW) $(LIBICUTOOLUTIL) $(LIBICUIO) $(LIBICUI18N) $(LIBICUUC) $(DEFAULT_LIBS) $(LIB_M)
 
-FUZZER_TARGETS = break_iterator_fuzzer calendar_fuzzer collator_compare_fuzzer collator_rulebased_fuzzer converter_fuzzer date_format_fuzzer locale_fuzzer locale_morph_fuzzer number_format_fuzzer ucasemap_fuzzer uloc_canonicalize_fuzzer uloc_for_language_tag_fuzzer uloc_get_name_fuzzer uloc_is_right_to_left_fuzzer uloc_open_keywords_fuzzer unicode_string_codepage_create_fuzzer uregex_open_fuzzer
+FUZZER_TARGETS = break_iterator_fuzzer calendar_fuzzer collator_compare_fuzzer collator_rulebased_fuzzer converter_fuzzer date_format_fuzzer list_format_fuzzer locale_fuzzer locale_morph_fuzzer number_format_fuzzer ucasemap_fuzzer uloc_canonicalize_fuzzer uloc_for_language_tag_fuzzer uloc_get_name_fuzzer uloc_is_right_to_left_fuzzer uloc_open_keywords_fuzzer unicode_string_codepage_create_fuzzer uregex_open_fuzzer
 
 OBJECTS = $(FUZZER_TARGETS:%=%.o)
 OBJECTS += fuzzer_driver.o locale_util.o

diff --git a/icu4c/source/test/fuzzer/list_format_fuzzer.cpp b/icu4c/source/test/fuzzer/list_format_fuzzer.cpp
@@ -0,0 +1,60 @@
+// © 2023 and later: Unicode, Inc. and others.
+// License & terms of use: http://www.unicode.org/copyright.html
+
+// Fuzzer for ICU Calendar.
+
+#include <cstring>
+
+#include "fuzzer_utils.h"
+
+#include "unicode/listformatter.h"
+#include "unicode/locid.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+    uint16_t rnd;
+    UListFormatterType type;
+    UListFormatterWidth width;
+    if (size < sizeof(rnd) + sizeof(type) + sizeof(width)) return 0;
+    icu::StringPiece fuzzData(reinterpret_cast<const char *>(data), size);
+
+    std::memcpy(&rnd, fuzzData.data(), sizeof(rnd));
+    icu::Locale locale = GetRandomLocale(rnd);
+    fuzzData.remove_prefix(sizeof(rnd));
+
+    std::memcpy(&type, fuzzData.data(), sizeof(type));
+    fuzzData.remove_prefix(sizeof(type));
+    type = static_cast<UListFormatterType>(
+        static_cast<int>(type) % (static_cast<int>(ULISTFMT_TYPE_UNITS) + 1));
+    std::memcpy(&width, fuzzData.data(), sizeof(width));
+    fuzzData.remove_prefix(sizeof(width));
+    width = static_cast<UListFormatterWidth>(
+        static_cast<int>(width) % (static_cast<int>(ULISTFMT_WIDTH_NARROW) + 1));
+
+    size_t len = fuzzData.size() / sizeof(char16_t);
+    icu::UnicodeString text(false, reinterpret_cast<const char16_t*>(fuzzData.data()), len);
+    const icu::UnicodeString items[] = { text, text, text, text };
+
+    UErrorCode status = U_ZERO_ERROR;
+    std::unique_ptr<icu::ListFormatter> listFormat(
+        icu::ListFormatter::createInstance(locale, status));
+
+    if (U_SUCCESS(status)) {
+        for (size_t i = 0; i <= 4; i++) {
+            icu::UnicodeString appendTo;
+            status = U_ZERO_ERROR;
+            listFormat->format(items, i, appendTo, status);
+        }
+    }
+    status = U_ZERO_ERROR;
+    listFormat.reset(
+        icu::ListFormatter::createInstance(locale, type, width, status));
+    if (U_SUCCESS(status)) {
+        for (size_t i = 0; i <= 4; i++) {
+            icu::UnicodeString appendTo;
+            status = U_ZERO_ERROR;
+            listFormat->format(items, i, appendTo, status);
+        }
+    }
+
+    return EXIT_SUCCESS;
+}