Better fuzzing corpus

cschreib · cschreib · commit 21ae5ba8db81 · 2024-09-02T13:20:53.000+01:00
diff --git a/fuzzing/input/fuzz1.txt b/fuzzing/input/fuzz1.txt
diff --git a/fuzzing/input/fuzz2.txt b/fuzzing/input/fuzz2.txt
@@ -0,0 +1 @@
+bee.legs != cat.legs
diff --git a/fuzzing/input/fuzz3.txt b/fuzzing/input/fuzz3.txt
@@ -0,0 +1 @@
+bee.has_tail or cat.has_tail
diff --git a/fuzzing/input/fuzz4.txt b/fuzzing/input/fuzz4.txt
@@ -0,0 +1 @@
+bee.legs + cat.legs == 12
diff --git a/fuzzing/input/fuzz5.txt b/fuzzing/input/fuzz5.txt
@@ -0,0 +1 @@
+min(bee.legs, cat.legs)
diff --git a/fuzzing/input/fuzz6.txt b/fuzzing/input/fuzz6.txt
@@ -0,0 +1 @@
+cat.sound == 'meow'
diff --git a/fuzzing/input/fuzz7.txt b/fuzzing/input/fuzz7.txt
@@ -0,0 +1 @@
+cat.sound[0:2] + bee.sound[2:4]
diff --git a/fuzzing/input/fuzz8.txt b/fuzzing/input/fuzz8.txt
@@ -0,0 +1 @@
+cat.sound if cat.has_tail else bee.sound
diff --git a/fuzzing/input/fuzz9.txt b/fuzzing/input/fuzz9.txt
@@ -0,0 +1 @@
+bee.colors[0] in cat.colors
diff --git a/fuzzing/runner/src/main.cpp b/fuzzing/runner/src/main.cpp
@@ -9,6 +9,14 @@ int main() {
     jsonexpr::variable_registry vars;
     jsonexpr::function_registry funcs = jsonexpr::default_functions();
 
+    vars["cat"] = R"({
+        "legs": 4, "has_tail": true, "sound": "meow", "colors": ["orange", "black"]
+    })"_json;
+
+    vars["bee"] = R"({
+        "legs": 6, "has_tail": false, "sound": "bzzz", "colors": ["yellow"]
+    })"_json;
+
 #ifdef __AFL_HAVE_MANUAL_CONTROL
     __AFL_INIT();
 #endif

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+cat.sound if cat.has_tail else bee.sound`