script_fuzzer.cpp

Go to the documentation of this file.

#include <fuzzer/FuzzedDataProvider.h>
#include "behaviortree_cpp/scripting/script_parser.hpp"
#include "behaviortree_cpp/blackboard.h"
#include "behaviortree_cpp/basic_types.h"
#include <cstdint>
#include <string>
#include <iostream>
#include <iomanip>
 
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
{
  if(size < 4)
  {
    return 0;
  }
 
  FuzzedDataProvider fuzz_data(data, size);
 
  try
  {
    BT::Ast::Environment env;
    env.vars = BT::Blackboard::create();
    env.enums = std::make_shared<BT::EnumsTable>();
 
    // Add some test variables to the blackboard
    env.vars->set("test_int", 42);
    env.vars->set("test_double", 3.14);
    env.vars->set("test_bool", true);
    env.vars->set("test_string", std::string("test"));
 
    // Add some test enums
    (*env.enums)["RUNNING"] = 0;
    (*env.enums)["SUCCESS"] = 1;
    (*env.enums)["FAILURE"] = 2;
 
    std::string script = fuzz_data.ConsumeRandomLengthString();
 
    auto validation_result = BT::ValidateScript(script);
 
    if(!validation_result)
    {
      auto parsed_script = BT::ParseScript(script);
      if(parsed_script)
      {
        try
        {
          auto result = parsed_script.value()(env);
 
          if(result.isNumber())
          {
            volatile auto num = result.cast<double>();
          }
 
          env.vars->set("result", result);
 
          BT::Any read_back;
          env.vars->get("result", read_back);
        }
        catch(const BT::RuntimeError&)
        {}
      }
    }
 
    BT::ParseScriptAndExecute(env, script);
  }
  catch(const std::exception&)
  {}
 
  return 0;
}