team-charls / charls-dotnet / 10861860088

93%

push

github

Add LibFuzzerDecode project + fix 2 defects (#62)

The Nuget package SharpFuzz provides support to fuzz C# code. SharpFuzz provides support for the fuzzing engines AFL and libfuzzer.
As an initial step add a project that uses libfuzzer. Libfuzzer can be used on Windows and Linux.
Libfuzzer found initially 2 issues:

1) JpegLSDecoder.GetDestination could return a negative size due to overflow. Fix this by doing a checked calculation and throwing an InvalidDataException.
2) Reading bits from a too short byte stream would loop forever as the test was incorrect (same problem exist in C++).

1368 of 1493 branches covered (91.63%)

Branch coverage included in aggregate %.

9 of 9 new or added lines in 2 files covered. (100.0%)

3353 of 3496 relevant lines covered (95.91%)

271507.27 hits per line