mirror of
https://github.com/syoyo/tinygltf.git
synced 2026-06-08 03:03:50 +00:00
188d7b257b
Adds a structured DIGEST block (asset, buffers w/ FNV-1a hash, bufferViews,
accessors w/ min/max, mesh primitives w/ sorted attribute maps, nodes w/
normalized TRS+matrix, materials, textures/samplers/images, skins,
animations, cameras, scenes) emitted by both loader_example (v1) and
tester_v3_c (v3 C, now accepting a file arg). test_runner.py runs both,
diffs the digests, and reports counts/digest mismatches with v1 as truth.
Also rolls in /simplify follow-ups on top of 7f736d1: a shared
tg3__json_number_to_double helper to dedupe inline number coercions, a
collapsed fuzz_gltf_v3_c harness using a single tg3_fuzz_run dispatcher,
a rewritten max_safe_uint64_real comment explaining the 53-bit mantissa
constraint, and a tests/Makefile fix so tester_v3_c is a real prerequisite
of `all` (built once via the dedicated rule, not duplicated).
Verifier passes 134/134 on the Khronos glTF-Sample-Models/2.0 suite.
bufferView.target and image.mime_type/uri are intentionally excluded from
the digest: v1 infers target from accessor usage and rewrites image
URIs/mime via stb_image, neither of which is a parse-fidelity concern.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
40 lines
1.2 KiB
C
40 lines
1.2 KiB
C
#include "tiny_gltf_v3.h"
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
static const uint64_t FUZZ_MEMORY_BUDGET = 64ULL * 1024 * 1024;
|
|
|
|
typedef tg3_error_code (*tg3_fuzz_parse_fn)(tg3_model *, tg3_error_stack *,
|
|
const uint8_t *, uint64_t, const char *, uint32_t, const tg3_parse_options *);
|
|
|
|
static void tg3_fuzz_run(tg3_fuzz_parse_fn fn, int parse_float32,
|
|
const uint8_t *data, size_t size) {
|
|
tg3_model model;
|
|
tg3_error_stack errors;
|
|
tg3_parse_options opts;
|
|
|
|
tg3_error_stack_init(&errors);
|
|
tg3_parse_options_init(&opts);
|
|
opts.memory.memory_budget = FUZZ_MEMORY_BUDGET;
|
|
opts.parse_float32 = parse_float32;
|
|
|
|
fn(&model, &errors, data, (uint64_t)size, "", 0, &opts);
|
|
|
|
tg3_model_free(&model);
|
|
tg3_error_stack_free(&errors);
|
|
}
|
|
|
|
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
|
|
if (size == 0) return 0;
|
|
|
|
switch (data[0] % 4) {
|
|
case 0: tg3_fuzz_run(tg3_parse_auto, 0, data + 1, size - 1); break;
|
|
case 1: tg3_fuzz_run(tg3_parse, 0, data + 1, size - 1); break;
|
|
case 2: tg3_fuzz_run(tg3_parse_glb, 0, data + 1, size - 1); break;
|
|
case 3: tg3_fuzz_run(tg3_parse_auto, 1, data + 1, size - 1); break;
|
|
}
|
|
|
|
return 0;
|
|
}
|