summaryrefslogtreecommitdiff
path: root/fuzz/fuzz.rs
diff options
context:
space:
mode:
authorJohn Turner <jturner.usa@gmail.com>2025-11-17 22:45:41 +0000
committerJohn Turner <jturner.usa@gmail.com>2025-11-17 22:45:41 +0000
commitdc4725884107fe3c6f0853f2aebae5652e7d8fe2 (patch)
tree8c8cd1908cea4fbe22371a5ba3917aef8379819b /fuzz/fuzz.rs
parent63db65b2f0d85a41a0ceb38460b7970c5ce8b1ac (diff)
downloadgentoo-utils-dc4725884107fe3c6f0853f2aebae5652e7d8fe2.tar.gz
reject fuzz inputs with invisible characters
Diffstat (limited to 'fuzz/fuzz.rs')
-rw-r--r--fuzz/fuzz.rs4
1 files changed, 4 insertions, 0 deletions
diff --git a/fuzz/fuzz.rs b/fuzz/fuzz.rs
index fd01914..8fadc86 100644
--- a/fuzz/fuzz.rs
+++ b/fuzz/fuzz.rs
@@ -41,6 +41,10 @@ pub unsafe extern "C" fn LLVMFuzzerTestOneInput(input: *const u8, len: usize) ->
Err(_) => return -1,
};
+ if !str.chars().all(|c| c.is_ascii_graphic()) {
+ return -1;
+ }
+
let atom = str.trim();
let mut stdin = PY_PROCESS.stdin.lock().expect("failed to get stdin lock");