Make the fuzzer handle \p and \P specially. Change-Id: I7390d0474e4e9fd8cfb86be49f3a308b6e2ccde6 Reviewed-on: https://code-review.googlesource.com/c/38570 Reviewed-by: Paul Wankadia <junyer@google.com>
diff --git a/re2/fuzzing/re2_fuzzer.cc b/re2/fuzzing/re2_fuzzer.cc index 83971a1..5e5d324 100644 --- a/re2/fuzzing/re2_fuzzer.cc +++ b/re2/fuzzing/re2_fuzzer.cc
@@ -113,10 +113,11 @@ // in timeouts nonetheless. The marginal cost is high - even more so when // counted repetition is involved - whereas the marginal benefit is zero. // TODO(junyer): Handle [:isalnum:] et al. when they start to cause pain. - int cc = 0; + int char_class = 0; + int backslash_p = 0; // very expensive, so handle specially for (size_t i = 0; i < size; i++) { if (data[i] == '.') - cc++; + char_class++; if (data[i] != '\\') continue; i++; @@ -126,9 +127,13 @@ data[i] == 'd' || data[i] == 'D' || data[i] == 's' || data[i] == 'S' || data[i] == 'w' || data[i] == 'W') - cc++; + char_class++; + if (data[i] == 'p' || data[i] == 'P') + backslash_p++; } - if (cc > 9) + if (char_class > 9) + return 0; + if (backslash_p > 1) return 0; // The one-at-a-time hash by Bob Jenkins.