Add git.Blob fuzz target

DaveLak · DaveLak · commit 48abb1cbc138 · 2024-05-04T14:40:26.000-04:00
Based on the `test_blob.py` unit test.
diff --git a/fuzzing/dictionaries/fuzz_blob.dict b/fuzzing/dictionaries/fuzz_blob.dict
@@ -0,0 +1 @@
+"\\377\\377\\377\\377\\377\\377\\377\\377" 
diff --git a/fuzzing/fuzz-targets/fuzz_blob.py b/fuzzing/fuzz-targets/fuzz_blob.py
@@ -0,0 +1,36 @@
+import atheris
+import sys
+import os
+import tempfile
+
+if getattr(sys, "frozen", False) and hasattr(sys, "_MEIPASS"):
+ path_to_bundled_git_binary = os.path.abspath(os.path.join(os.path.dirname(__file__), "git"))
+ os.environ["GIT_PYTHON_GIT_EXECUTABLE"] = path_to_bundled_git_binary
+
+with atheris.instrument_imports():
+ import git
+
+
+def TestOneInput(data):
+ fdp = atheris.FuzzedDataProvider(data)
+
+ with tempfile.TemporaryDirectory() as temp_dir:
+ repo = git.Repo.init(path=temp_dir)
+ blob = git.Blob(
+ repo,
+ **{
+ "binsha": git.Blob.NULL_BIN_SHA,
+ "path": fdp.ConsumeUnicodeNoSurrogates(fdp.remaining_bytes()),
+ },
+ )
+
+ _ = blob.mime_type
+
+
+def main():
+ atheris.Setup(sys.argv, TestOneInput)
+ atheris.Fuzz()
+
+
+if __name__ == "__main__":
+ main()

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+"\\377\\377\\377\\377\\377\\377\\377\\377"`
-Original file line number
+Diff line change
@@ @@ -0,0 +1,36 @@ @@
 +importatheris
 +importsys
 +importos
 +importtempfile
++
 +ifgetattr(sys, "frozen", False) andhasattr(sys, "_MEIPASS"):
 +path_to_bundled_git_binary=os.path.abspath(os.path.join(os.path.dirname(__file__), "git"))
 +os.environ["GIT_PYTHON_GIT_EXECUTABLE"] =path_to_bundled_git_binary
++
 +withatheris.instrument_imports():
 +importgit
++
++
 +defTestOneInput(data):
 +fdp=atheris.FuzzedDataProvider(data)
++
 +withtempfile.TemporaryDirectory() astemp_dir:
 +repo=git.Repo.init(path=temp_dir)
 +blob=git.Blob(
 +repo,
 +**{
 +"binsha": git.Blob.NULL_BIN_SHA,
 +"path": fdp.ConsumeUnicodeNoSurrogates(fdp.remaining_bytes()),
 + },
 + )
++
 +_=blob.mime_type
++
++
 +defmain():
 +atheris.Setup(sys.argv, TestOneInput)
 +atheris.Fuzz()
++
++
 +if__name__=="__main__":
 +main()