numpy: Fuzz binary matrix loader (#13001)

This requires changing the amount of memory made available to the
fuzzer, so also add the logic to copy fuzzer option files.

Author: serge-sans-paille

projects/numpy/Dockerfile

@@ -27,4 +27,4 @@ RUN curl -LO https://bootstrap.pypa.io/get-pip.py && \
     python3 -m pip install --root-user-action=ignore atheris pyinstaller
 RUN git clone https://github.com/numpy/numpy && cd numpy && git submodule update --init
 WORKDIR $SRC
-COPY *.py build.sh $SRC/
+COPY *.options *.py build.sh $SRC/

projects/numpy/build.sh

@@ -23,6 +23,8 @@ unset LIB_FUZZING_ENGINE
 
 python3 -m pip install .
 
+cp $SRC/*.options $OUT/
+
 mkdir -p $SRC/numpy-fuzzers
 cd $SRC/numpy-fuzzers
 

projects/numpy/fuzz_binary_loader.options

@@ -0,0 +1,2 @@
+[libfuzzer]
+rss_limit_mb=6000

projects/numpy/fuzz_binary_loader.py

@@ -0,0 +1,56 @@
+#!/usr/bin/python3
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import atheris
+import os
+import sys
+import tempfile
+from tokenize import TokenError
+from zipfile import BadZipFile
+
+with atheris.instrument_imports():
+  import numpy as np
+
+def TestOneInput(input_bytes):
+  with tempfile.NamedTemporaryFile(suffix=".npy", delete=False) as fd:
+      fdp = atheris.FuzzedDataProvider(input_bytes)
+      fd.write(fdp.ConsumeBytes(sys.maxsize))
+      tmpname = fd.name
+
+  try:
+    np.load(tmpname)
+  # Catch all of the exceptions that are documented in help(np.load)
+  except OSError:
+    return
+  except ValueError:
+    return
+  except EOFError:
+    return
+  except IndentationError:
+    return
+  except BadZipFile:
+    return
+  except TokenError:
+    return
+  finally:
+    os.remove(tmpname)
+
+def main():
+  atheris.instrument_all()
+  atheris.Setup(sys.argv, TestOneInput, enable_python_coverage=True)
+  atheris.Fuzz()
+
+if __name__ == "__main__":
+  main()