// SPDX-License-Identifier: ISC/* * Fuzz target for the session JSONL loader: feeds arbitrary bytes to * session_parse_line() one input at a time (each fuzz input is treated * as one log line) plus, when the input contains newlines, as a whole * multi-line log split the way clm_session_load() would see it. The * loader's contract is that NO byte sequence is fatal -- bad lines are * skipped -- so any crash/leak/UB here is a real bug. */#include <stddef.h>#include <stdint.h>#include <string.h> #include <cjson/cJSON.h> #include "afl.h"#include "clm/history.h"#include "session_internal.h" static voidfuzz_one(const uint8_t *data, size_t size){	struct clm_history h;	cJSON *meta = NULL; 	clm_history_init(&h);	(void)session_parse_line(&h, (const char *)data, size, &meta); 	/* Split on newlines like the real loader. */	const char *p = (const char *)data, *end = p + size;	while (p < end) {		const char *nl = memchr(p, '\n', (size_t)(end - p));		size_t len = nl != NULL ? (size_t)(nl - p) : (size_t)(end - p);		(void)session_parse_line(&h, p, len, &meta);		p += len + 1;	} 	if (meta != NULL)		cJSON_Delete(meta);	clm_history_free(&h);} __AFL_FUZZ_INIT() intmain(int argc, char *argv[]){	(void)argc;	(void)argv; #ifdef __AFL_HAVE_MANUAL_CONTROL	__AFL_INIT();#endif 	const uint8_t *buf = __AFL_FUZZ_TESTCASE_BUF; 	while (__AFL_LOOP(CLM_FUZZ_LOOPS))		fuzz_one(buf, (size_t)__AFL_FUZZ_TESTCASE_LEN); 	return 0;}