HarfBuzz text shaping engine http://harfbuzz.github.io/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Garret Rieger 067f90a820 [subset] Fix for fuzzer timeout. 3 years ago
..
fonts [subset] Fix for fuzzer timeout. 3 years ago
sets Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
Makefile.am Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
README Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
hb-draw-fuzzer.cc Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
hb-fuzzer.hh Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
hb-set-fuzzer.cc [set fuzzer] limit the total number of set members in a fuzzing input. 4 years ago
hb-shape-fuzzer.cc Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
hb-subset-fuzzer.cc [subset] switch ..._set_flags to not take a mask. 3 years ago
main.cc [blob] Add failing versions of create API 3 years ago
meson.build [meson] Require 0.55.0 3 years ago
run-draw-fuzzer-tests.py Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
run-shape-fuzzer-tests.py Merge pull request #2733 from astiob/buffer-context-doc 4 years ago
run-subset-fuzzer-tests.py Merge pull request #2733 from astiob/buffer-context-doc 4 years ago

README

In order to build the fuzzer one needs to build HarfBuzz and
harfbuzz/test/fuzzing/hb-fuzzer.cc with:
- Using the most recent Clang
- With -fsanitize=address (or =undefined, or a combination)
- With -fsanitize-coverage=edge[,8bit-counters,trace-cmp]
- With various defines that limit worst case exponential behavior.
See FUZZING_CPPFLAGS in harfbuzz/src/Makefile.am for the list.
- link against libFuzzer

To run the fuzzer one needs to first obtain a test corpus as a directory
containing interesting fonts. A good starting point is inside
harfbuzz/test/shaping/fonts/fonts/.
Then, run the fuzzer like this:
./hb-fuzzer -max_len=2048 CORPUS_DIR
Where max_len specifies the maximal length of font files to handle.
The smaller the faster.

For more details consult the following locations:
- http://llvm.org/docs/LibFuzzer.html or
- https://github.com/google/libfuzzer-bot/tree/master/harfbuzz
- https://github.com/harfbuzz/harfbuzz/issues/139