Function LLVMFuzzerTestOneInput

test/fuzz/fuzz_core_funcs.c:98–135

}

int LLVMFuzzerTestOneInput(const char *data, size_t size) {
  str buf;
  const int ncmds = count_noparam_cmds();
  struct socket_info si = {};

  if (size <= ncmds + 1) {
    return 0;
  }

  struct sip_msg msg = {};
  msg.buf = (char *)data;
  msg.len = size - ncmds;

  if (parse_msg(msg.buf, msg.len, &msg) != 0)
    goto out;
  if (msg.via1 == NULL || msg.via1->error != PARSE_OK)
    goto out;
  msg.rcv.src_ip.af = AF_INET;
  msg.rcv.src_port = (unsigned short)66666;
  for (int i = 0; i < ncmds; i++) {
    const cmd_export_t *cmd = pick_some_command(data[size - ncmds + i]);
    if (cmd == NULL)
      continue;
    cmd->function(&msg, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL);
  }
  for (int i = 0; i < nspecs; i++) {
    pv_value_t v = {};

    pv_specs[i].getf(&msg, &pv_specs[i].pvp, &v);
  }
  buf.s = build_req_buf_from_sip_req(&msg, (unsigned int*)&buf.len,
    &si, PROTO_UDP, NULL, 0 /*flags*/);
  if (buf.s)
    pkg_free(buf.s);
out:
  free_sip_msg(&msg);
  return 0;
}