aboutsummaryrefslogtreecommitdiff
path: root/examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java
diff options
context:
space:
mode:
Diffstat (limited to 'examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java')
-rw-r--r--examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java63
1 files changed, 63 insertions, 0 deletions
diff --git a/examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java b/examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java
new file mode 100644
index 00000000..97e03811
--- /dev/null
+++ b/examples/junit/src/test/java/com/example/HermeticInstrumentationFuzzTest.java
@@ -0,0 +1,63 @@
+/*
+ * Copyright 2022 Code Intelligence GmbH
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.example;
+
+import com.code_intelligence.jazzer.junit.FuzzTest;
+import java.util.regex.Pattern;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.parallel.Execution;
+import org.junit.jupiter.api.parallel.ExecutionMode;
+
+@SuppressWarnings("InvalidPatternSyntax")
+@Execution(ExecutionMode.CONCURRENT)
+class HermeticInstrumentationFuzzTest {
+ class VulnerableFuzzClass {
+ public void vulnerableMethod(String input) {
+ Pattern.compile(input);
+ }
+ }
+
+ class VulnerableUnitClass {
+ public void vulnerableMethod(String input) {
+ Pattern.compile(input);
+ }
+ }
+
+ @FuzzTest
+ @Execution(ExecutionMode.CONCURRENT)
+ void fuzzTest1(byte[] data) {
+ new VulnerableFuzzClass().vulnerableMethod("[");
+ }
+
+ @Test
+ @Execution(ExecutionMode.CONCURRENT)
+ void unitTest1() {
+ new VulnerableUnitClass().vulnerableMethod("[");
+ }
+
+ @FuzzTest
+ @Execution(ExecutionMode.CONCURRENT)
+ void fuzzTest2(byte[] data) {
+ Pattern.compile("[");
+ }
+
+ @Test
+ @Execution(ExecutionMode.CONCURRENT)
+ void unitTest2() {
+ Pattern.compile("[");
+ }
+}