Convert another fuzzer to C.

regress/fuzzers/zip_write_encrypt_aes256_file_fuzzer.c

@@ -0,0 +1,72 @@
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include <zip.h>
+
+void
+randomize(char *buf, int count) {
+    const char *charset = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+    int charlen;
+    int i;
+    charlen = strlen(charset);
+    srandom(time(NULL));
+    for (i = 0; i < count; i++) {
+        buf[i] = charset[random() % charlen];
+    }
+}
+
+/**
+   This fuzzing target takes input data, creates a ZIP archive, load
+   it to a buffer, adds a file to it with AES-256 encryption and a
+   specified password, and then closes and removes the archive.
+
+   The purpose of this fuzzer is to test security of ZIP archive
+   handling and encryption in the libzip by subjecting it to various
+   inputs, including potentially malicious or malformed data of
+   different file types.
+ **/
+
+int
+LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+    char path[20 + 7 + 4 + 1], password[21], file[21];
+    int error = 0;
+    struct zip *archive;
+
+    snprintf(path, sizeof(path), "XXXXXXXXXXXXXXXXXXXX_pkware.zip");
+    snprintf(password, sizeof(password), "XXXXXXXXXXXXXXXXXXXX");
+    snprintf(file, sizeof(file), "XXXXXXXXXXXXXXXXXXXX");
+    randomize(path, 20);
+    randomize(password, 20);
+    randomize(file, 20);
+
+    if ((archive = zip_open(path, ZIP_CREATE, &error)) == NULL) {
+        return -1;
+    }
+
+    struct zip_source *source = zip_source_buffer(archive, data, size, 0);
+    if (source == NULL) {
+        zip_discard(archive);
+        fprintf(stderr, "failed to create source buffer. %s\n", zip_strerror(archive));
+        return -1;
+    }
+
+    int index = (int)zip_file_add(archive, file, source, ZIP_FL_OVERWRITE);
+    if (index < 0) {
+        zip_discard(archive);
+        fprintf(stderr, "failed to add file to archive: %s\n", zip_strerror(archive));
+        return -1;
+    }
+    if (zip_file_set_encryption(archive, index, ZIP_EM_AES_256, password) < 0) {
+        zip_discard(archive);
+        fprintf(stderr, "failed to set file encryption: %s\n", zip_strerror(archive));
+        return -1;
+    }
+    if (zip_close(archive) < 0) {
+        zip_discard(archive);
+        fprintf(stderr, "error closing archive: %s\n", zip_strerror(archive));
+        return -1;
+    }
+    remove(path);
+
+    return 0;
+}

regress/ossfuzz.sh

@@ -39,8 +39,8 @@ $CXX $CXXFLAGS -I. -I../lib \
     -o $OUT/zip_read_fuzzer \
     $LIB_FUZZING_ENGINE $SRC/libzip/build/lib/libzip.a -lz -v -lssl -lcrypto
 
-$CXX $CXXFLAGS -std=c++11 -I. -I../lib \
-    $SRC/libzip/regress/fuzzers/zip_write_encrypt_aes256_file_fuzzer.cc \
+$CXX $CXXFLAGS -I. -I../lib \
+    $SRC/libzip/regress/fuzzers/zip_write_encrypt_aes256_file_fuzzer.c \
     -o $OUT/zip_write_encrypt_aes256_file_fuzzer \
     $LIB_FUZZING_ENGINE $SRC/libzip/build/lib/libzip.a -lz -v -lssl -lcrypto