Add fuzzing targets for snappy-java

.github/workflows/cifuzz.yml

@@ -0,0 +1,32 @@
+name: CIFuzz
+on: [pull_request]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  Fuzzing:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Build Fuzzers
+      id: build
+      uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
+      with:
+        oss-fuzz-project-name: 'snappy-java'
+        dry-run: false
+    - name: Run Fuzzers
+      uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
+      with:
+        oss-fuzz-project-name: 'snappy-java'
+        fuzz-seconds: 600
+        dry-run: false
+    - name: Upload Crash
+      uses: actions/upload-artifact@v4
+      if: failure() && steps.build.outcome == 'success'
+      with:
+        name: artifacts
+        path: ./out/artifacts

src/test/java/org/xerial/snappy/fuzz/BitShuffleFuzzer.java

@@ -0,0 +1,58 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+////////////////////////////////////////////////////////////////////////////////
+
+package org.xerial.snappy.fuzz;
+
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import org.xerial.snappy.Snappy;
+import org.xerial.snappy.BitShuffle;
+import java.util.Objects;
+
+public class BitShuffleFuzzer {
+  private static final int SIZE = 4096;
+
+  public static void fuzzerTestOneInput(FuzzedDataProvider data) {
+    fuzzBitshuffle(data.consumeInts(SIZE), BitShuffle::shuffle, BitShuffle::unshuffleIntArray, "int[]");
+    fuzzBitshuffle(data.consumeLongs(SIZE), BitShuffle::shuffle, BitShuffle::unshuffleLongArray, "long[]");
+    fuzzBitshuffle(data.consumeShorts(SIZE), BitShuffle::shuffle, BitShuffle::unshuffleShortArray, "short[]");
+    fuzzBitshuffle(data.consumeFloats(SIZE), BitShuffle::shuffle, BitShuffle::unshuffleFloatArray, "float[]");
+    fuzzBitshuffle(data.consumeDoubles(SIZE), BitShuffle::shuffle, BitShuffle::unshuffleDoubleArray, "double[]");
+  }
+
+  @FunctionalInterface
+  private interface ShuffleFn<T> {
+    byte[] apply(T input) throws Exception;
+  }
+
+  @FunctionalInterface
+  private interface UnshuffleFn<T> {
+    T apply(byte[] input) throws Exception;
+  }
+
+  private static <T> void fuzzBitshuffle(T original, ShuffleFn<T> shuffle, UnshuffleFn<T> unshuffle, String typeName) {
+    try {
+      byte[] shuffledByteArray = shuffle.apply(original);
+      byte[] compressed = Snappy.compress(shuffledByteArray);
+      byte[] uncompressed = Snappy.uncompress(compressed);
+      T result = unshuffle.apply(uncompressed);
+      if (!Objects.deepEquals(original, result)) {
+        throw new IllegalStateException("Original and uncompressed " + typeName + " data are different");
+      }
+    } catch (Exception e) {
+      throw new RuntimeException(e);
+    }
+  }
+}

src/test/java/org/xerial/snappy/fuzz/FuzzBlock.java

@@ -0,0 +1,22 @@
+// Copyright 2023 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+////////////////////////////////////////////////////////////////////////////////
+
+package org.xerial.snappy.fuzz;
+
+@FunctionalInterface
+public interface FuzzBlock {
+    void run() throws Exception;
+}