[1050] | 1 | /* infcover.c -- test zlib's inflate routines with full code coverage
|
---|
| 2 | * Copyright (C) 2011 Mark Adler
|
---|
| 3 | * For conditions of distribution and use, see copyright notice in zlib.h
|
---|
| 4 | */
|
---|
| 5 |
|
---|
| 6 | /* to use, do: ./configure --cover && make cover */
|
---|
| 7 |
|
---|
| 8 | #include <stdio.h>
|
---|
| 9 | #include <stdlib.h>
|
---|
| 10 | #include <string.h>
|
---|
| 11 | #include <assert.h>
|
---|
| 12 | #include "zlib.h"
|
---|
| 13 |
|
---|
| 14 | /* get definition of internal structure so we can mess with it (see pull()),
|
---|
| 15 | and so we can call inflate_trees() (see cover5()) */
|
---|
| 16 | #define ZLIB_INTERNAL
|
---|
| 17 | #include "inftrees.h"
|
---|
| 18 | #include "inflate.h"
|
---|
| 19 |
|
---|
| 20 | #define local static
|
---|
| 21 |
|
---|
| 22 | /* -- memory tracking routines -- */
|
---|
| 23 |
|
---|
| 24 | /*
|
---|
| 25 | These memory tracking routines are provided to zlib and track all of zlib's
|
---|
| 26 | allocations and deallocations, check for LIFO operations, keep a current
|
---|
| 27 | and high water mark of total bytes requested, optionally set a limit on the
|
---|
| 28 | total memory that can be allocated, and when done check for memory leaks.
|
---|
| 29 |
|
---|
| 30 | They are used as follows:
|
---|
| 31 |
|
---|
| 32 | z_stream strm;
|
---|
| 33 | mem_setup(&strm) initializes the memory tracking and sets the
|
---|
| 34 | zalloc, zfree, and opaque members of strm to use
|
---|
| 35 | memory tracking for all zlib operations on strm
|
---|
| 36 | mem_limit(&strm, limit) sets a limit on the total bytes requested -- a
|
---|
| 37 | request that exceeds this limit will result in an
|
---|
| 38 | allocation failure (returns NULL) -- setting the
|
---|
| 39 | limit to zero means no limit, which is the default
|
---|
| 40 | after mem_setup()
|
---|
| 41 | mem_used(&strm, "msg") prints to stderr "msg" and the total bytes used
|
---|
| 42 | mem_high(&strm, "msg") prints to stderr "msg" and the high water mark
|
---|
| 43 | mem_done(&strm, "msg") ends memory tracking, releases all allocations
|
---|
| 44 | for the tracking as well as leaked zlib blocks, if
|
---|
| 45 | any. If there was anything unusual, such as leaked
|
---|
| 46 | blocks, non-FIFO frees, or frees of addresses not
|
---|
| 47 | allocated, then "msg" and information about the
|
---|
| 48 | problem is printed to stderr. If everything is
|
---|
| 49 | normal, nothing is printed. mem_done resets the
|
---|
| 50 | strm members to Z_NULL to use the default memory
|
---|
| 51 | allocation routines on the next zlib initialization
|
---|
| 52 | using strm.
|
---|
| 53 | */
|
---|
| 54 |
|
---|
| 55 | /* these items are strung together in a linked list, one for each allocation */
|
---|
| 56 | struct mem_item {
|
---|
| 57 | void *ptr; /* pointer to allocated memory */
|
---|
| 58 | size_t size; /* requested size of allocation */
|
---|
| 59 | struct mem_item *next; /* pointer to next item in list, or NULL */
|
---|
| 60 | };
|
---|
| 61 |
|
---|
| 62 | /* this structure is at the root of the linked list, and tracks statistics */
|
---|
| 63 | struct mem_zone {
|
---|
| 64 | struct mem_item *first; /* pointer to first item in list, or NULL */
|
---|
| 65 | size_t total, highwater; /* total allocations, and largest total */
|
---|
| 66 | size_t limit; /* memory allocation limit, or 0 if no limit */
|
---|
| 67 | int notlifo, rogue; /* counts of non-LIFO frees and rogue frees */
|
---|
| 68 | };
|
---|
| 69 |
|
---|
| 70 | /* memory allocation routine to pass to zlib */
|
---|
| 71 | local void *mem_alloc(void *mem, unsigned count, unsigned size)
|
---|
| 72 | {
|
---|
| 73 | void *ptr;
|
---|
| 74 | struct mem_item *item;
|
---|
| 75 | struct mem_zone *zone = mem;
|
---|
| 76 | size_t len = count * (size_t)size;
|
---|
| 77 |
|
---|
| 78 | /* induced allocation failure */
|
---|
| 79 | if (zone == NULL || (zone->limit && zone->total + len > zone->limit))
|
---|
| 80 | return NULL;
|
---|
| 81 |
|
---|
| 82 | /* perform allocation using the standard library, fill memory with a
|
---|
| 83 | non-zero value to make sure that the code isn't depending on zeros */
|
---|
| 84 | ptr = malloc(len);
|
---|
| 85 | if (ptr == NULL)
|
---|
| 86 | return NULL;
|
---|
| 87 | memset(ptr, 0xa5, len);
|
---|
| 88 |
|
---|
| 89 | /* create a new item for the list */
|
---|
| 90 | item = malloc(sizeof(struct mem_item));
|
---|
| 91 | if (item == NULL) {
|
---|
| 92 | free(ptr);
|
---|
| 93 | return NULL;
|
---|
| 94 | }
|
---|
| 95 | item->ptr = ptr;
|
---|
| 96 | item->size = len;
|
---|
| 97 |
|
---|
| 98 | /* insert item at the beginning of the list */
|
---|
| 99 | item->next = zone->first;
|
---|
| 100 | zone->first = item;
|
---|
| 101 |
|
---|
| 102 | /* update the statistics */
|
---|
| 103 | zone->total += item->size;
|
---|
| 104 | if (zone->total > zone->highwater)
|
---|
| 105 | zone->highwater = zone->total;
|
---|
| 106 |
|
---|
| 107 | /* return the allocated memory */
|
---|
| 108 | return ptr;
|
---|
| 109 | }
|
---|
| 110 |
|
---|
| 111 | /* memory free routine to pass to zlib */
|
---|
| 112 | local void mem_free(void *mem, void *ptr)
|
---|
| 113 | {
|
---|
| 114 | struct mem_item *item, *next;
|
---|
| 115 | struct mem_zone *zone = mem;
|
---|
| 116 |
|
---|
| 117 | /* if no zone, just do a free */
|
---|
| 118 | if (zone == NULL) {
|
---|
| 119 | free(ptr);
|
---|
| 120 | return;
|
---|
| 121 | }
|
---|
| 122 |
|
---|
| 123 | /* point next to the item that matches ptr, or NULL if not found -- remove
|
---|
| 124 | the item from the linked list if found */
|
---|
| 125 | next = zone->first;
|
---|
| 126 | if (next) {
|
---|
| 127 | if (next->ptr == ptr)
|
---|
| 128 | zone->first = next->next; /* first one is it, remove from list */
|
---|
| 129 | else {
|
---|
| 130 | do { /* search the linked list */
|
---|
| 131 | item = next;
|
---|
| 132 | next = item->next;
|
---|
| 133 | } while (next != NULL && next->ptr != ptr);
|
---|
| 134 | if (next) { /* if found, remove from linked list */
|
---|
| 135 | item->next = next->next;
|
---|
| 136 | zone->notlifo++; /* not a LIFO free */
|
---|
| 137 | }
|
---|
| 138 |
|
---|
| 139 | }
|
---|
| 140 | }
|
---|
| 141 |
|
---|
| 142 | /* if found, update the statistics and free the item */
|
---|
| 143 | if (next) {
|
---|
| 144 | zone->total -= next->size;
|
---|
| 145 | free(next);
|
---|
| 146 | }
|
---|
| 147 |
|
---|
| 148 | /* if not found, update the rogue count */
|
---|
| 149 | else
|
---|
| 150 | zone->rogue++;
|
---|
| 151 |
|
---|
| 152 | /* in any case, do the requested free with the standard library function */
|
---|
| 153 | free(ptr);
|
---|
| 154 | }
|
---|
| 155 |
|
---|
| 156 | /* set up a controlled memory allocation space for monitoring, set the stream
|
---|
| 157 | parameters to the controlled routines, with opaque pointing to the space */
|
---|
| 158 | local void mem_setup(z_stream *strm)
|
---|
| 159 | {
|
---|
| 160 | struct mem_zone *zone;
|
---|
| 161 |
|
---|
| 162 | zone = malloc(sizeof(struct mem_zone));
|
---|
| 163 | assert(zone != NULL);
|
---|
| 164 | zone->first = NULL;
|
---|
| 165 | zone->total = 0;
|
---|
| 166 | zone->highwater = 0;
|
---|
| 167 | zone->limit = 0;
|
---|
| 168 | zone->notlifo = 0;
|
---|
| 169 | zone->rogue = 0;
|
---|
| 170 | strm->opaque = zone;
|
---|
| 171 | strm->zalloc = mem_alloc;
|
---|
| 172 | strm->zfree = mem_free;
|
---|
| 173 | }
|
---|
| 174 |
|
---|
| 175 | /* set a limit on the total memory allocation, or 0 to remove the limit */
|
---|
| 176 | local void mem_limit(z_stream *strm, size_t limit)
|
---|
| 177 | {
|
---|
| 178 | struct mem_zone *zone = strm->opaque;
|
---|
| 179 |
|
---|
| 180 | zone->limit = limit;
|
---|
| 181 | }
|
---|
| 182 |
|
---|
| 183 | /* show the current total requested allocations in bytes */
|
---|
| 184 | local void mem_used(z_stream *strm, char *prefix)
|
---|
| 185 | {
|
---|
| 186 | struct mem_zone *zone = strm->opaque;
|
---|
| 187 |
|
---|
| 188 | fprintf(stderr, "%s: %lu allocated\n", prefix, zone->total);
|
---|
| 189 | }
|
---|
| 190 |
|
---|
| 191 | /* show the high water allocation in bytes */
|
---|
| 192 | local void mem_high(z_stream *strm, char *prefix)
|
---|
| 193 | {
|
---|
| 194 | struct mem_zone *zone = strm->opaque;
|
---|
| 195 |
|
---|
| 196 | fprintf(stderr, "%s: %lu high water mark\n", prefix, zone->highwater);
|
---|
| 197 | }
|
---|
| 198 |
|
---|
| 199 | /* release the memory allocation zone -- if there are any surprises, notify */
|
---|
| 200 | local void mem_done(z_stream *strm, char *prefix)
|
---|
| 201 | {
|
---|
| 202 | int count = 0;
|
---|
| 203 | struct mem_item *item, *next;
|
---|
| 204 | struct mem_zone *zone = strm->opaque;
|
---|
| 205 |
|
---|
| 206 | /* show high water mark */
|
---|
| 207 | mem_high(strm, prefix);
|
---|
| 208 |
|
---|
| 209 | /* free leftover allocations and item structures, if any */
|
---|
| 210 | item = zone->first;
|
---|
| 211 | while (item != NULL) {
|
---|
| 212 | free(item->ptr);
|
---|
| 213 | next = item->next;
|
---|
| 214 | free(item);
|
---|
| 215 | item = next;
|
---|
| 216 | count++;
|
---|
| 217 | }
|
---|
| 218 |
|
---|
| 219 | /* issue alerts about anything unexpected */
|
---|
| 220 | if (count || zone->total)
|
---|
| 221 | fprintf(stderr, "** %s: %lu bytes in %d blocks not freed\n",
|
---|
| 222 | prefix, zone->total, count);
|
---|
| 223 | if (zone->notlifo)
|
---|
| 224 | fprintf(stderr, "** %s: %d frees not LIFO\n", prefix, zone->notlifo);
|
---|
| 225 | if (zone->rogue)
|
---|
| 226 | fprintf(stderr, "** %s: %d frees not recognized\n",
|
---|
| 227 | prefix, zone->rogue);
|
---|
| 228 |
|
---|
| 229 | /* free the zone and delete from the stream */
|
---|
| 230 | free(zone);
|
---|
| 231 | strm->opaque = Z_NULL;
|
---|
| 232 | strm->zalloc = Z_NULL;
|
---|
| 233 | strm->zfree = Z_NULL;
|
---|
| 234 | }
|
---|
| 235 |
|
---|
| 236 | /* -- inflate test routines -- */
|
---|
| 237 |
|
---|
| 238 | /* Decode a hexadecimal string, set *len to length, in[] to the bytes. This
|
---|
| 239 | decodes liberally, in that hex digits can be adjacent, in which case two in
|
---|
| 240 | a row writes a byte. Or they can delimited by any non-hex character, where
|
---|
| 241 | the delimiters are ignored except when a single hex digit is followed by a
|
---|
| 242 | delimiter in which case that single digit writes a byte. The returned
|
---|
| 243 | data is allocated and must eventually be freed. NULL is returned if out of
|
---|
| 244 | memory. If the length is not needed, then len can be NULL. */
|
---|
| 245 | local unsigned char *h2b(const char *hex, unsigned *len)
|
---|
| 246 | {
|
---|
| 247 | unsigned char *in;
|
---|
| 248 | unsigned next, val;
|
---|
| 249 |
|
---|
| 250 | in = malloc((strlen(hex) + 1) >> 1);
|
---|
| 251 | if (in == NULL)
|
---|
| 252 | return NULL;
|
---|
| 253 | next = 0;
|
---|
| 254 | val = 1;
|
---|
| 255 | do {
|
---|
| 256 | if (*hex >= '0' && *hex <= '9')
|
---|
| 257 | val = (val << 4) + *hex - '0';
|
---|
| 258 | else if (*hex >= 'A' && *hex <= 'F')
|
---|
| 259 | val = (val << 4) + *hex - 'A' + 10;
|
---|
| 260 | else if (*hex >= 'a' && *hex <= 'f')
|
---|
| 261 | val = (val << 4) + *hex - 'a' + 10;
|
---|
| 262 | else if (val != 1 && val < 32) /* one digit followed by delimiter */
|
---|
| 263 | val += 240; /* make it look like two digits */
|
---|
| 264 | if (val > 255) { /* have two digits */
|
---|
| 265 | in[next++] = val & 0xff; /* save the decoded byte */
|
---|
| 266 | val = 1; /* start over */
|
---|
| 267 | }
|
---|
| 268 | } while (*hex++); /* go through the loop with the terminating null */
|
---|
| 269 | if (len != NULL)
|
---|
| 270 | *len = next;
|
---|
| 271 | in = reallocf(in, next);
|
---|
| 272 | return in;
|
---|
| 273 | }
|
---|
| 274 |
|
---|
| 275 | /* generic inflate() run, where hex is the hexadecimal input data, what is the
|
---|
| 276 | text to include in an error message, step is how much input data to feed
|
---|
| 277 | inflate() on each call, or zero to feed it all, win is the window bits
|
---|
| 278 | parameter to inflateInit2(), len is the size of the output buffer, and err
|
---|
| 279 | is the error code expected from the first inflate() call (the second
|
---|
| 280 | inflate() call is expected to return Z_STREAM_END). If win is 47, then
|
---|
| 281 | header information is collected with inflateGetHeader(). If a zlib stream
|
---|
| 282 | is looking for a dictionary, then an empty dictionary is provided.
|
---|
| 283 | inflate() is run until all of the input data is consumed. */
|
---|
| 284 | local void inf(char *hex, char *what, unsigned step, int win, unsigned len,
|
---|
| 285 | int err)
|
---|
| 286 | {
|
---|
| 287 | int ret;
|
---|
| 288 | unsigned have;
|
---|
| 289 | unsigned char *in, *out;
|
---|
| 290 | z_stream strm, copy;
|
---|
| 291 | gz_header head;
|
---|
| 292 |
|
---|
| 293 | mem_setup(&strm);
|
---|
| 294 | strm.avail_in = 0;
|
---|
| 295 | strm.next_in = Z_NULL;
|
---|
| 296 | ret = inflateInit2(&strm, win);
|
---|
| 297 | if (ret != Z_OK) {
|
---|
| 298 | mem_done(&strm, what);
|
---|
| 299 | return;
|
---|
| 300 | }
|
---|
| 301 | out = malloc(len); assert(out != NULL);
|
---|
| 302 | if (win == 47) {
|
---|
| 303 | head.extra = out;
|
---|
| 304 | head.extra_max = len;
|
---|
| 305 | head.name = out;
|
---|
| 306 | head.name_max = len;
|
---|
| 307 | head.comment = out;
|
---|
| 308 | head.comm_max = len;
|
---|
| 309 | ret = inflateGetHeader(&strm, &head); assert(ret == Z_OK);
|
---|
| 310 | }
|
---|
| 311 | in = h2b(hex, &have); assert(in != NULL);
|
---|
| 312 | if (step == 0 || step > have)
|
---|
| 313 | step = have;
|
---|
| 314 | strm.avail_in = step;
|
---|
| 315 | have -= step;
|
---|
| 316 | strm.next_in = in;
|
---|
| 317 | do {
|
---|
| 318 | strm.avail_out = len;
|
---|
| 319 | strm.next_out = out;
|
---|
| 320 | ret = inflate(&strm, Z_NO_FLUSH); assert(err == 9 || ret == err);
|
---|
| 321 | if (ret != Z_OK && ret != Z_BUF_ERROR && ret != Z_NEED_DICT)
|
---|
| 322 | break;
|
---|
| 323 | if (ret == Z_NEED_DICT) {
|
---|
| 324 | ret = inflateSetDictionary(&strm, in, 1);
|
---|
| 325 | assert(ret == Z_DATA_ERROR);
|
---|
| 326 | mem_limit(&strm, 1);
|
---|
| 327 | ret = inflateSetDictionary(&strm, out, 0);
|
---|
| 328 | assert(ret == Z_MEM_ERROR);
|
---|
| 329 | mem_limit(&strm, 0);
|
---|
| 330 | ((struct inflate_state *)strm.state)->mode = DICT;
|
---|
| 331 | ret = inflateSetDictionary(&strm, out, 0);
|
---|
| 332 | assert(ret == Z_OK);
|
---|
| 333 | ret = inflate(&strm, Z_NO_FLUSH); assert(ret == Z_BUF_ERROR);
|
---|
| 334 | }
|
---|
| 335 | ret = inflateCopy(©, &strm); assert(ret == Z_OK);
|
---|
| 336 | ret = inflateEnd(©); assert(ret == Z_OK);
|
---|
| 337 | err = 9; /* don't care next time around */
|
---|
| 338 | have += strm.avail_in;
|
---|
| 339 | strm.avail_in = step > have ? have : step;
|
---|
| 340 | have -= strm.avail_in;
|
---|
| 341 | } while (strm.avail_in);
|
---|
| 342 | free(in);
|
---|
| 343 | free(out);
|
---|
| 344 | ret = inflateReset2(&strm, -8); assert(ret == Z_OK);
|
---|
| 345 | ret = inflateEnd(&strm); assert(ret == Z_OK);
|
---|
| 346 | mem_done(&strm, what);
|
---|
| 347 | }
|
---|
| 348 |
|
---|
| 349 | /* cover all of the lines in inflate.c up to inflate() */
|
---|
| 350 | local void cover_support(void)
|
---|
| 351 | {
|
---|
| 352 | int ret;
|
---|
| 353 | z_stream strm;
|
---|
| 354 |
|
---|
| 355 | mem_setup(&strm);
|
---|
| 356 | strm.avail_in = 0;
|
---|
| 357 | strm.next_in = Z_NULL;
|
---|
| 358 | ret = inflateInit(&strm); assert(ret == Z_OK);
|
---|
| 359 | mem_used(&strm, "inflate init");
|
---|
| 360 | ret = inflatePrime(&strm, 5, 31); assert(ret == Z_OK);
|
---|
| 361 | ret = inflatePrime(&strm, -1, 0); assert(ret == Z_OK);
|
---|
| 362 | ret = inflateSetDictionary(&strm, Z_NULL, 0);
|
---|
| 363 | assert(ret == Z_STREAM_ERROR);
|
---|
| 364 | ret = inflateEnd(&strm); assert(ret == Z_OK);
|
---|
| 365 | mem_done(&strm, "prime");
|
---|
| 366 |
|
---|
| 367 | inf("63 0", "force window allocation", 0, -15, 1, Z_OK);
|
---|
| 368 | inf("63 18 5", "force window replacement", 0, -8, 259, Z_OK);
|
---|
| 369 | inf("63 18 68 30 d0 0 0", "force split window update", 4, -8, 259, Z_OK);
|
---|
| 370 | inf("3 0", "use fixed blocks", 0, -15, 1, Z_STREAM_END);
|
---|
| 371 | inf("", "bad window size", 0, 1, 0, Z_STREAM_ERROR);
|
---|
| 372 |
|
---|
| 373 | mem_setup(&strm);
|
---|
| 374 | strm.avail_in = 0;
|
---|
| 375 | strm.next_in = Z_NULL;
|
---|
| 376 | ret = inflateInit_(&strm, ZLIB_VERSION - 1, (int)sizeof(z_stream));
|
---|
| 377 | assert(ret == Z_VERSION_ERROR);
|
---|
| 378 | mem_done(&strm, "wrong version");
|
---|
| 379 |
|
---|
| 380 | strm.avail_in = 0;
|
---|
| 381 | strm.next_in = Z_NULL;
|
---|
| 382 | ret = inflateInit(&strm); assert(ret == Z_OK);
|
---|
| 383 | ret = inflateEnd(&strm); assert(ret == Z_OK);
|
---|
| 384 | fputs("inflate built-in memory routines\n", stderr);
|
---|
| 385 | }
|
---|
| 386 |
|
---|
| 387 | /* cover all inflate() header and trailer cases and code after inflate() */
|
---|
| 388 | local void cover_wrap(void)
|
---|
| 389 | {
|
---|
| 390 | int ret;
|
---|
| 391 | z_stream strm, copy;
|
---|
| 392 | unsigned char dict[257];
|
---|
| 393 |
|
---|
| 394 | ret = inflate(Z_NULL, 0); assert(ret == Z_STREAM_ERROR);
|
---|
| 395 | ret = inflateEnd(Z_NULL); assert(ret == Z_STREAM_ERROR);
|
---|
| 396 | ret = inflateCopy(Z_NULL, Z_NULL); assert(ret == Z_STREAM_ERROR);
|
---|
| 397 | fputs("inflate bad parameters\n", stderr);
|
---|
| 398 |
|
---|
| 399 | inf("1f 8b 0 0", "bad gzip method", 0, 31, 0, Z_DATA_ERROR);
|
---|
| 400 | inf("1f 8b 8 80", "bad gzip flags", 0, 31, 0, Z_DATA_ERROR);
|
---|
| 401 | inf("77 85", "bad zlib method", 0, 15, 0, Z_DATA_ERROR);
|
---|
| 402 | inf("8 99", "set window size from header", 0, 0, 0, Z_OK);
|
---|
| 403 | inf("78 9c", "bad zlib window size", 0, 8, 0, Z_DATA_ERROR);
|
---|
| 404 | inf("78 9c 63 0 0 0 1 0 1", "check adler32", 0, 15, 1, Z_STREAM_END);
|
---|
| 405 | inf("1f 8b 8 1e 0 0 0 0 0 0 1 0 0 0 0 0 0", "bad header crc", 0, 47, 1,
|
---|
| 406 | Z_DATA_ERROR);
|
---|
| 407 | inf("1f 8b 8 2 0 0 0 0 0 0 1d 26 3 0 0 0 0 0 0 0 0 0", "check gzip length",
|
---|
| 408 | 0, 47, 0, Z_STREAM_END);
|
---|
| 409 | inf("78 90", "bad zlib header check", 0, 47, 0, Z_DATA_ERROR);
|
---|
| 410 | inf("8 b8 0 0 0 1", "need dictionary", 0, 8, 0, Z_NEED_DICT);
|
---|
| 411 | inf("78 9c 63 0", "compute adler32", 0, 15, 1, Z_OK);
|
---|
| 412 |
|
---|
| 413 | mem_setup(&strm);
|
---|
| 414 | strm.avail_in = 0;
|
---|
| 415 | strm.next_in = Z_NULL;
|
---|
| 416 | ret = inflateInit2(&strm, -8);
|
---|
| 417 | strm.avail_in = 2;
|
---|
| 418 | strm.next_in = (void *)"\x63";
|
---|
| 419 | strm.avail_out = 1;
|
---|
| 420 | strm.next_out = (void *)&ret;
|
---|
| 421 | mem_limit(&strm, 1);
|
---|
| 422 | ret = inflate(&strm, Z_NO_FLUSH); assert(ret == Z_MEM_ERROR);
|
---|
| 423 | ret = inflate(&strm, Z_NO_FLUSH); assert(ret == Z_MEM_ERROR);
|
---|
| 424 | mem_limit(&strm, 0);
|
---|
| 425 | memset(dict, 0, 257);
|
---|
| 426 | ret = inflateSetDictionary(&strm, dict, 257);
|
---|
| 427 | assert(ret == Z_OK);
|
---|
| 428 | mem_limit(&strm, (sizeof(struct inflate_state) << 1) + 256);
|
---|
| 429 | ret = inflatePrime(&strm, 16, 0); assert(ret == Z_OK);
|
---|
| 430 | strm.avail_in = 2;
|
---|
| 431 | strm.next_in = (void *)"\x80";
|
---|
| 432 | ret = inflateSync(&strm); assert(ret == Z_DATA_ERROR);
|
---|
| 433 | ret = inflate(&strm, Z_NO_FLUSH); assert(ret == Z_STREAM_ERROR);
|
---|
| 434 | strm.avail_in = 4;
|
---|
| 435 | strm.next_in = (void *)"\0\0\xff\xff";
|
---|
| 436 | ret = inflateSync(&strm); assert(ret == Z_OK);
|
---|
| 437 | (void)inflateSyncPoint(&strm);
|
---|
| 438 | ret = inflateCopy(©, &strm); assert(ret == Z_MEM_ERROR);
|
---|
| 439 | mem_limit(&strm, 0);
|
---|
| 440 | ret = inflateUndermine(&strm, 1); assert(ret == Z_DATA_ERROR);
|
---|
| 441 | (void)inflateMark(&strm);
|
---|
| 442 | ret = inflateEnd(&strm); assert(ret == Z_OK);
|
---|
| 443 | mem_done(&strm, "miscellaneous, force memory errors");
|
---|
| 444 | }
|
---|
| 445 |
|
---|
| 446 | /* input and output functions for inflateBack() */
|
---|
| 447 | local unsigned pull(void *desc, unsigned char **buf)
|
---|
| 448 | {
|
---|
| 449 | static unsigned int next = 0;
|
---|
| 450 | static unsigned char dat[] = {0x63, 0, 2, 0};
|
---|
| 451 | struct inflate_state *state;
|
---|
| 452 |
|
---|
| 453 | if (desc == Z_NULL) {
|
---|
| 454 | next = 0;
|
---|
| 455 | return 0; /* no input (already provided at next_in) */
|
---|
| 456 | }
|
---|
| 457 | state = (void *)((z_stream *)desc)->state;
|
---|
| 458 | if (state != Z_NULL)
|
---|
| 459 | state->mode = SYNC; /* force an otherwise impossible situation */
|
---|
| 460 | return next < sizeof(dat) ? (*buf = dat + next++, 1) : 0;
|
---|
| 461 | }
|
---|
| 462 |
|
---|
| 463 | local int push(void *desc, unsigned char *buf, unsigned len)
|
---|
| 464 | {
|
---|
| 465 | buf += len;
|
---|
| 466 | return desc != Z_NULL; /* force error if desc not null */
|
---|
| 467 | }
|
---|
| 468 |
|
---|
| 469 | /* cover inflateBack() up to common deflate data cases and after those */
|
---|
| 470 | local void cover_back(void)
|
---|
| 471 | {
|
---|
| 472 | int ret;
|
---|
| 473 | z_stream strm;
|
---|
| 474 | unsigned char win[32768];
|
---|
| 475 |
|
---|
| 476 | ret = inflateBackInit_(Z_NULL, 0, win, 0, 0);
|
---|
| 477 | assert(ret == Z_VERSION_ERROR);
|
---|
| 478 | ret = inflateBackInit(Z_NULL, 0, win); assert(ret == Z_STREAM_ERROR);
|
---|
| 479 | ret = inflateBack(Z_NULL, Z_NULL, Z_NULL, Z_NULL, Z_NULL);
|
---|
| 480 | assert(ret == Z_STREAM_ERROR);
|
---|
| 481 | ret = inflateBackEnd(Z_NULL); assert(ret == Z_STREAM_ERROR);
|
---|
| 482 | fputs("inflateBack bad parameters\n", stderr);
|
---|
| 483 |
|
---|
| 484 | mem_setup(&strm);
|
---|
| 485 | ret = inflateBackInit(&strm, 15, win); assert(ret == Z_OK);
|
---|
| 486 | strm.avail_in = 2;
|
---|
| 487 | strm.next_in = (void *)"\x03";
|
---|
| 488 | ret = inflateBack(&strm, pull, Z_NULL, push, Z_NULL);
|
---|
| 489 | assert(ret == Z_STREAM_END);
|
---|
| 490 | /* force output error */
|
---|
| 491 | strm.avail_in = 3;
|
---|
| 492 | strm.next_in = (void *)"\x63\x00";
|
---|
| 493 | ret = inflateBack(&strm, pull, Z_NULL, push, &strm);
|
---|
| 494 | assert(ret == Z_BUF_ERROR);
|
---|
| 495 | /* force mode error by mucking with state */
|
---|
| 496 | ret = inflateBack(&strm, pull, &strm, push, Z_NULL);
|
---|
| 497 | assert(ret == Z_STREAM_ERROR);
|
---|
| 498 | ret = inflateBackEnd(&strm); assert(ret == Z_OK);
|
---|
| 499 | mem_done(&strm, "inflateBack bad state");
|
---|
| 500 |
|
---|
| 501 | ret = inflateBackInit(&strm, 15, win); assert(ret == Z_OK);
|
---|
| 502 | ret = inflateBackEnd(&strm); assert(ret == Z_OK);
|
---|
| 503 | fputs("inflateBack built-in memory routines\n", stderr);
|
---|
| 504 | }
|
---|
| 505 |
|
---|
| 506 | /* do a raw inflate of data in hexadecimal with both inflate and inflateBack */
|
---|
| 507 | local int try(char *hex, char *id, int err)
|
---|
| 508 | {
|
---|
| 509 | int ret;
|
---|
| 510 | unsigned len, size;
|
---|
| 511 | unsigned char *in, *out, *win;
|
---|
| 512 | char *prefix;
|
---|
| 513 | z_stream strm;
|
---|
| 514 |
|
---|
| 515 | /* convert to hex */
|
---|
| 516 | in = h2b(hex, &len);
|
---|
| 517 | assert(in != NULL);
|
---|
| 518 |
|
---|
| 519 | /* allocate work areas */
|
---|
| 520 | size = len << 3;
|
---|
| 521 | out = malloc(size);
|
---|
| 522 | assert(out != NULL);
|
---|
| 523 | win = malloc(32768);
|
---|
| 524 | assert(win != NULL);
|
---|
| 525 | prefix = malloc(strlen(id) + 6);
|
---|
| 526 | assert(prefix != NULL);
|
---|
| 527 |
|
---|
| 528 | /* first with inflate */
|
---|
| 529 | strcpy(prefix, id);
|
---|
| 530 | strcat(prefix, "-late");
|
---|
| 531 | mem_setup(&strm);
|
---|
| 532 | strm.avail_in = 0;
|
---|
| 533 | strm.next_in = Z_NULL;
|
---|
| 534 | ret = inflateInit2(&strm, err < 0 ? 47 : -15);
|
---|
| 535 | assert(ret == Z_OK);
|
---|
| 536 | strm.avail_in = len;
|
---|
| 537 | strm.next_in = in;
|
---|
| 538 | do {
|
---|
| 539 | strm.avail_out = size;
|
---|
| 540 | strm.next_out = out;
|
---|
| 541 | ret = inflate(&strm, Z_TREES);
|
---|
| 542 | assert(ret != Z_STREAM_ERROR && ret != Z_MEM_ERROR);
|
---|
| 543 | if (ret == Z_DATA_ERROR || ret == Z_NEED_DICT)
|
---|
| 544 | break;
|
---|
| 545 | } while (strm.avail_in || strm.avail_out == 0);
|
---|
| 546 | if (err) {
|
---|
| 547 | assert(ret == Z_DATA_ERROR);
|
---|
| 548 | assert(strcmp(id, strm.msg) == 0);
|
---|
| 549 | }
|
---|
| 550 | inflateEnd(&strm);
|
---|
| 551 | mem_done(&strm, prefix);
|
---|
| 552 |
|
---|
| 553 | /* then with inflateBack */
|
---|
| 554 | if (err >= 0) {
|
---|
| 555 | strcpy(prefix, id);
|
---|
| 556 | strcat(prefix, "-back");
|
---|
| 557 | mem_setup(&strm);
|
---|
| 558 | ret = inflateBackInit(&strm, 15, win);
|
---|
| 559 | assert(ret == Z_OK);
|
---|
| 560 | strm.avail_in = len;
|
---|
| 561 | strm.next_in = in;
|
---|
| 562 | ret = inflateBack(&strm, pull, Z_NULL, push, Z_NULL);
|
---|
| 563 | assert(ret != Z_STREAM_ERROR);
|
---|
| 564 | if (err) {
|
---|
| 565 | assert(ret == Z_DATA_ERROR);
|
---|
| 566 | assert(strcmp(id, strm.msg) == 0);
|
---|
| 567 | }
|
---|
| 568 | inflateBackEnd(&strm);
|
---|
| 569 | mem_done(&strm, prefix);
|
---|
| 570 | }
|
---|
| 571 |
|
---|
| 572 | /* clean up */
|
---|
| 573 | free(prefix);
|
---|
| 574 | free(win);
|
---|
| 575 | free(out);
|
---|
| 576 | free(in);
|
---|
| 577 | return ret;
|
---|
| 578 | }
|
---|
| 579 |
|
---|
| 580 | /* cover deflate data cases in both inflate() and inflateBack() */
|
---|
| 581 | local void cover_inflate(void)
|
---|
| 582 | {
|
---|
| 583 | try("0 0 0 0 0", "invalid stored block lengths", 1);
|
---|
| 584 | try("3 0", "fixed", 0);
|
---|
| 585 | try("6", "invalid block type", 1);
|
---|
| 586 | try("1 1 0 fe ff 0", "stored", 0);
|
---|
| 587 | try("fc 0 0", "too many length or distance symbols", 1);
|
---|
| 588 | try("4 0 fe ff", "invalid code lengths set", 1);
|
---|
| 589 | try("4 0 24 49 0", "invalid bit length repeat", 1);
|
---|
| 590 | try("4 0 24 e9 ff ff", "invalid bit length repeat", 1);
|
---|
| 591 | try("4 0 24 e9 ff 6d", "invalid code -- missing end-of-block", 1);
|
---|
| 592 | try("4 80 49 92 24 49 92 24 71 ff ff 93 11 0",
|
---|
| 593 | "invalid literal/lengths set", 1);
|
---|
| 594 | try("4 80 49 92 24 49 92 24 f b4 ff ff c3 84", "invalid distances set", 1);
|
---|
| 595 | try("4 c0 81 8 0 0 0 0 20 7f eb b 0 0", "invalid literal/length code", 1);
|
---|
| 596 | try("2 7e ff ff", "invalid distance code", 1);
|
---|
| 597 | try("c c0 81 0 0 0 0 0 90 ff 6b 4 0", "invalid distance too far back", 1);
|
---|
| 598 |
|
---|
| 599 | /* also trailer mismatch just in inflate() */
|
---|
| 600 | try("1f 8b 8 0 0 0 0 0 0 0 3 0 0 0 0 1", "incorrect data check", -1);
|
---|
| 601 | try("1f 8b 8 0 0 0 0 0 0 0 3 0 0 0 0 0 0 0 0 1",
|
---|
| 602 | "incorrect length check", -1);
|
---|
| 603 | try("5 c0 21 d 0 0 0 80 b0 fe 6d 2f 91 6c", "pull 17", 0);
|
---|
| 604 | try("5 e0 81 91 24 cb b2 2c 49 e2 f 2e 8b 9a 47 56 9f fb fe ec d2 ff 1f",
|
---|
| 605 | "long code", 0);
|
---|
| 606 | try("ed c0 1 1 0 0 0 40 20 ff 57 1b 42 2c 4f", "length extra", 0);
|
---|
| 607 | try("ed cf c1 b1 2c 47 10 c4 30 fa 6f 35 1d 1 82 59 3d fb be 2e 2a fc f c",
|
---|
| 608 | "long distance and extra", 0);
|
---|
| 609 | try("ed c0 81 0 0 0 0 80 a0 fd a9 17 a9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 "
|
---|
| 610 | "0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 6", "window end", 0);
|
---|
| 611 | inf("2 8 20 80 0 3 0", "inflate_fast TYPE return", 0, -15, 258,
|
---|
| 612 | Z_STREAM_END);
|
---|
| 613 | inf("63 18 5 40 c 0", "window wrap", 3, -8, 300, Z_OK);
|
---|
| 614 | }
|
---|
| 615 |
|
---|
| 616 | /* cover remaining lines in inftrees.c */
|
---|
| 617 | local void cover_trees(void)
|
---|
| 618 | {
|
---|
| 619 | int ret;
|
---|
| 620 | unsigned bits;
|
---|
| 621 | unsigned short lens[16], work[16];
|
---|
| 622 | code *next, table[ENOUGH_DISTS];
|
---|
| 623 |
|
---|
| 624 | /* we need to call inflate_table() directly in order to manifest not-
|
---|
| 625 | enough errors, since zlib insures that enough is always enough */
|
---|
| 626 | for (bits = 0; bits < 15; bits++)
|
---|
| 627 | lens[bits] = (unsigned short)(bits + 1);
|
---|
| 628 | lens[15] = 15;
|
---|
| 629 | next = table;
|
---|
| 630 | bits = 15;
|
---|
| 631 | ret = inflate_table(DISTS, lens, 16, &next, &bits, work);
|
---|
| 632 | assert(ret == 1);
|
---|
| 633 | next = table;
|
---|
| 634 | bits = 1;
|
---|
| 635 | ret = inflate_table(DISTS, lens, 16, &next, &bits, work);
|
---|
| 636 | assert(ret == 1);
|
---|
| 637 | fputs("inflate_table not enough errors\n", stderr);
|
---|
| 638 | }
|
---|
| 639 |
|
---|
| 640 | /* cover remaining inffast.c decoding and window copying */
|
---|
| 641 | local void cover_fast(void)
|
---|
| 642 | {
|
---|
| 643 | inf("e5 e0 81 ad 6d cb b2 2c c9 01 1e 59 63 ae 7d ee fb 4d fd b5 35 41 68"
|
---|
| 644 | " ff 7f 0f 0 0 0", "fast length extra bits", 0, -8, 258, Z_DATA_ERROR);
|
---|
| 645 | inf("25 fd 81 b5 6d 59 b6 6a 49 ea af 35 6 34 eb 8c b9 f6 b9 1e ef 67 49"
|
---|
| 646 | " 50 fe ff ff 3f 0 0", "fast distance extra bits", 0, -8, 258,
|
---|
| 647 | Z_DATA_ERROR);
|
---|
| 648 | inf("3 7e 0 0 0 0 0", "fast invalid distance code", 0, -8, 258,
|
---|
| 649 | Z_DATA_ERROR);
|
---|
| 650 | inf("1b 7 0 0 0 0 0", "fast invalid literal/length code", 0, -8, 258,
|
---|
| 651 | Z_DATA_ERROR);
|
---|
| 652 | inf("d c7 1 ae eb 38 c 4 41 a0 87 72 de df fb 1f b8 36 b1 38 5d ff ff 0",
|
---|
| 653 | "fast 2nd level codes and too far back", 0, -8, 258, Z_DATA_ERROR);
|
---|
| 654 | inf("63 18 5 8c 10 8 0 0 0 0", "very common case", 0, -8, 259, Z_OK);
|
---|
| 655 | inf("63 60 60 18 c9 0 8 18 18 18 26 c0 28 0 29 0 0 0",
|
---|
| 656 | "contiguous and wrap around window", 6, -8, 259, Z_OK);
|
---|
| 657 | inf("63 0 3 0 0 0 0 0", "copy direct from output", 0, -8, 259,
|
---|
| 658 | Z_STREAM_END);
|
---|
| 659 | }
|
---|
| 660 |
|
---|
| 661 | int main(void)
|
---|
| 662 | {
|
---|
| 663 | fprintf(stderr, "%s\n", zlibVersion());
|
---|
| 664 | cover_support();
|
---|
| 665 | cover_wrap();
|
---|
| 666 | cover_back();
|
---|
| 667 | cover_inflate();
|
---|
| 668 | cover_trees();
|
---|
| 669 | cover_fast();
|
---|
| 670 | return 0;
|
---|
| 671 | }
|
---|