1*3ac0a46fSAndroid Build Coastguard Worker // Copyright 2017 The PDFium Authors 2*3ac0a46fSAndroid Build Coastguard Worker // Use of this source code is governed by a BSD-style license that can be 3*3ac0a46fSAndroid Build Coastguard Worker // found in the LICENSE file. 4*3ac0a46fSAndroid Build Coastguard Worker 5*3ac0a46fSAndroid Build Coastguard Worker #include <stdint.h> 6*3ac0a46fSAndroid Build Coastguard Worker 7*3ac0a46fSAndroid Build Coastguard Worker #include "public/fpdf_formfill.h" 8*3ac0a46fSAndroid Build Coastguard Worker #include "testing/fuzzers/pdfium_fuzzer_helper.h" 9*3ac0a46fSAndroid Build Coastguard Worker 10*3ac0a46fSAndroid Build Coastguard Worker class PDFiumXFAFuzzer : public PDFiumFuzzerHelper { 11*3ac0a46fSAndroid Build Coastguard Worker public: 12*3ac0a46fSAndroid Build Coastguard Worker PDFiumXFAFuzzer() = default; 13*3ac0a46fSAndroid Build Coastguard Worker ~PDFiumXFAFuzzer() override = default; 14*3ac0a46fSAndroid Build Coastguard Worker GetFormCallbackVersion() const15*3ac0a46fSAndroid Build Coastguard Worker int GetFormCallbackVersion() const override { return 2; } 16*3ac0a46fSAndroid Build Coastguard Worker 17*3ac0a46fSAndroid Build Coastguard Worker // Return false if XFA doesn't load as otherwise we're duplicating the work 18*3ac0a46fSAndroid Build Coastguard Worker // done by the non-xfa fuzzer. OnFormFillEnvLoaded(FPDF_DOCUMENT doc)19*3ac0a46fSAndroid Build Coastguard Worker bool OnFormFillEnvLoaded(FPDF_DOCUMENT doc) override { 20*3ac0a46fSAndroid Build Coastguard Worker int form_type = FPDF_GetFormType(doc); 21*3ac0a46fSAndroid Build Coastguard Worker if (form_type != FORMTYPE_XFA_FULL && form_type != FORMTYPE_XFA_FOREGROUND) 22*3ac0a46fSAndroid Build Coastguard Worker return false; 23*3ac0a46fSAndroid Build Coastguard Worker return FPDF_LoadXFA(doc); 24*3ac0a46fSAndroid Build Coastguard Worker } 25*3ac0a46fSAndroid Build Coastguard Worker }; 26*3ac0a46fSAndroid Build Coastguard Worker LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)27*3ac0a46fSAndroid Build Coastguard Workerextern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { 28*3ac0a46fSAndroid Build Coastguard Worker PDFiumXFAFuzzer fuzzer; 29*3ac0a46fSAndroid Build Coastguard Worker fuzzer.RenderPdf(reinterpret_cast<const char*>(data), size); 30*3ac0a46fSAndroid Build Coastguard Worker return 0; 31*3ac0a46fSAndroid Build Coastguard Worker } 32