1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "base/command_line.h"
6 #include "base/file_util.h"
7 #include "base/files/file.h"
8 #include "base/strings/string_number_conversions.h"
9 #include "net/spdy/fuzzing/hpack_fuzz_util.h"
13 // Specifies a file having HPACK header sets.
14 const char kFileToParse[] = "file-to-parse";
16 // Target file for mutated HPACK header sets.
17 const char kFileToWrite[] = "file-to-write";
19 // Number of bits to flip per 1,024 bytes of input.
20 const char kFlipsPerThousand[] = "flips-per-thousand-bytes";
24 using base::StringPiece;
25 using net::HpackFuzzUtil;
28 // Reads length-prefixed input blocks, applies a bit-flipping mutation to each
29 // block, and writes length-prefixed blocks to the output file. While blocks
30 // themselves are mutated, the length-prefixes of written blocks are not.
31 int main(int argc, char** argv) {
32 CommandLine::Init(argc, argv);
33 const CommandLine& command_line = *CommandLine::ForCurrentProcess();
35 if (!command_line.HasSwitch(kFileToParse) ||
36 !command_line.HasSwitch(kFileToWrite) ||
37 !command_line.HasSwitch(kFlipsPerThousand)) {
38 LOG(ERROR) << "Usage: " << argv[0]
39 << " --" << kFileToParse << "=/path/to/file.in"
40 << " --" << kFileToWrite << "=/path/to/file.out"
41 << " --" << kFlipsPerThousand << "=10";
44 string file_to_parse = command_line.GetSwitchValueASCII(kFileToParse);
45 string file_to_write = command_line.GetSwitchValueASCII(kFileToWrite);
48 CHECK(base::StringToInt(command_line.GetSwitchValueASCII(kFlipsPerThousand),
51 DVLOG(1) << "Reading input from " << file_to_parse;
52 HpackFuzzUtil::Input input;
53 CHECK(base::ReadFileToString(base::FilePath::FromUTF8Unsafe(file_to_parse),
56 DVLOG(1) << "Writing output to " << file_to_write;
57 base::File file_out(base::FilePath::FromUTF8Unsafe(file_to_write),
58 base::File::FLAG_CREATE_ALWAYS | base::File::FLAG_WRITE);
59 CHECK(file_out.IsValid()) << file_out.error_details();
61 DVLOG(1) << "Flipping " << flip_ratio << " bits per 1024 input bytes";
63 size_t block_count = 0;
65 while (HpackFuzzUtil::NextHeaderBlock(&input, &block)) {
66 HpackFuzzUtil::FlipBits(
67 reinterpret_cast<uint8*>(const_cast<char*>(block.data())),
71 string prefix = HpackFuzzUtil::HeaderBlockPrefix(block.size());
73 CHECK_LT(0, file_out.WriteAtCurrentPos(prefix.data(), prefix.size()));
74 CHECK_LT(0, file_out.WriteAtCurrentPos(block.data(), block.size()));
77 CHECK(file_out.Flush());
78 DVLOG(1) << "Mutated " << block_count << " blocks.";