generic-library/cxx
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix a crasher found by libFuzzer

Browse Source 
git-svn-id: https://llvm.org/svn/llvm-project/libcxx/trunk@245849 91177308-0d34-0410-b5e6-96231b3b80d8
This commit is contained in:
Marshall Clow 2015-08-24 15:57:09 +00:00
parent bb2f28e15d
commit 70e8f59884
2 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
include/regex
View File

@ -1733,6 +1733,8 @@ template <class _CharT>
void void
__back_ref<_CharT>::__exec(__state& __s) const __back_ref<_CharT>::__exec(__state& __s) const
{ {
if (__mexp_ > __s.__sub_matches_.size())
__throw_regex_error<regex_constants::error_backref>();
sub_match<const _CharT*>& __sm = __s.__sub_matches_[__mexp_-1]; sub_match<const _CharT*>& __sm = __s.__sub_matches_[__mexp_-1];
if (__sm.matched) if (__sm.matched)
{ {

23
test/std/re/re.alg/re.alg.search/grep.pass.cpp
View File

@ -21,6 +21,28 @@
#include "test_iterators.h" #include "test_iterators.h"
extern "C" void LLVMFuzzerTestOneInput(const char *data)
{
size_t size = strlen(data);
if (size > 0)
{
try
{
std::regex::flag_type flag = std::regex_constants::grep;
std::string s((const char *)data, size);
std::regex re(s, flag);
std::regex_match(s, re);
}
catch (std::regex_error &ex) {}
}
}
void fuzz_tests() // patterns that the fuzzer has found
{
LLVMFuzzerTestOneInput(R"XX(Õ)_%()()((\8'_%()_%()_%()_%(()_%()_%()_%(.t;)()¥f()_%()(.)_%;)()!¥f(((()()XX");
}
int main() int main()
{ {
{ {
@ -55,4 +77,5 @@ int main()
assert(m.position(0) == 0); assert(m.position(0) == 0);
assert(m.str(0) == ""); assert(m.str(0) == "");
} }
fuzz_tests();
} }