.clusterfuzzlite/build.sh

@@ -16,7 +16,7 @@ meson setup "$BUILD" \
   -Db_lundef=false
 
 # build fuzzers
-ninja -v -C "$BUILD" test/fuzz/{fuzz_round_trip,fuzz_compression,fuzz_decompression}
+ninja -v -C "$BUILD" test/fuzz/{fuzz_round_trip,fuzz_compression,fuzz_decompression,fuzz_cmp_tool}
 find "$BUILD/test/fuzz" -maxdepth 1 -executable -type f -exec cp "{}" "$OUT" \;
 
 #TODO prepare corps

programs/cmp_tool.c

@@ -541,8 +541,8 @@ int CMP_MAIN(int argc, char **argv)
 		if (size < 0)
 			goto fail;
 		if (size < (ssize_t)model_size) {
-			fprintf(stderr, "%s: %s: Error: The files do not contain enough data. Expected: 0x%x, has 0x%zx.\n",
-				PROGRAM_NAME, model_file_name, model_size, size);
+			fprintf(stderr, "%s: %s: Error: The files do not contain enough data. Expected: 0x%x, has 0x%x.\n",
+				PROGRAM_NAME, model_file_name, model_size, (uint32_t)size);
 			goto fail;
 		}
 		if (size != (ssize_t)model_size) {

test/fuzz/fuzz_cmp_tool.c

@@ -122,6 +122,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *src, size_t size)
 
 		argv = FUZZ_malloc(sizeof(*argv) * MAX_ARG_COUNT);
 		data = FUZZ_malloc(sizeof(*data) * MAX_ARG_COUNT * MAX_ARG_SIZE);
+		memset(data, 0, sizeof(*data) * MAX_ARG_COUNT * MAX_ARG_SIZE);
 		for (i = 0; i < MAX_ARG_COUNT; i++)
 			argv[i] = &data[i*MAX_ARG_SIZE];