From 2dcd163d3bfc3337ab187347ea3adcb2b1f27314 Mon Sep 17 00:00:00 2001
From: Adam Korczynski <adam@adalogics.com>
Date: Fri, 10 Apr 2026 18:35:28 +0100
Subject: [PATCH] Add fuzzer for locale module

---
 Makefile         |  7 +++++--
 fuzz_targets.txt |  1 +
 locale.py        | 37 +++++++++++++++++++++++++++++++++++++
 3 files changed, 43 insertions(+), 2 deletions(-)
 create mode 100644 locale.py

diff --git a/Makefile b/Makefile
index 9103a1c..1c33411 100644
--- a/Makefile
+++ b/Makefile
@@ -1,8 +1,8 @@
-all : fuzzer-html fuzzer-email fuzzer-httpclient fuzzer-json fuzzer-difflib fuzzer-csv fuzzer-decode fuzzer-ast fuzzer-tarfile fuzzer-tarfile-hypothesis fuzzer-zipfile fuzzer-zipfile-hypothesis fuzzer-re fuzzer-configparser fuzzer-tomllib fuzzer-plistlib fuzzer-xml fuzzer-zoneinfo
+all : fuzzer-html fuzzer-email fuzzer-httpclient fuzzer-json fuzzer-difflib fuzzer-csv fuzzer-decode fuzzer-ast fuzzer-tarfile fuzzer-tarfile-hypothesis fuzzer-zipfile fuzzer-zipfile-hypothesis fuzzer-re fuzzer-configparser fuzzer-tomllib fuzzer-plistlib fuzzer-xml fuzzer-zoneinfo fuzzer-locale
 
 PYTHON_CONFIG_PATH=$(CPYTHON_INSTALL_PATH)/bin/python3-config
 CXXFLAGS += $(shell $(PYTHON_CONFIG_PATH) --cflags)
-LDFLAGS += -rdynamic $(shell $(PYTHON_CONFIG_PATH) --ldflags --embed)
+LDFLAGS += -rdynamic $(shell $(PYTHON_CONFIG_PATH) --ldflags --embed) $(CPYTHON_MODLIBS) -Wl,--allow-multiple-definition
 
 fuzzer-html:
 	clang++ $(CXXFLAGS) $(LIB_FUZZING_ENGINE) -std=c++17 fuzzer.cpp -DPYTHON_HARNESS_PATH="\"html.py\"" -ldl $(LDFLAGS) -o fuzzer-html
@@ -40,3 +40,6 @@ fuzzer-xml:
 	clang++ $(CXXFLAGS) $(LIB_FUZZING_ENGINE) -std=c++17 fuzzer.cpp -DPYTHON_HARNESS_PATH="\"xml.py\"" -ldl $(LDFLAGS) -o fuzzer-xml
 fuzzer-zoneinfo:
 	clang++ $(CXXFLAGS) $(LIB_FUZZING_ENGINE) -std=c++17 fuzzer.cpp -DPYTHON_HARNESS_PATH="\"zoneinfo.py\"" -ldl $(LDFLAGS) -o fuzzer-zoneinfo
+
+fuzzer-locale:
+	clang++ $(CXXFLAGS) $(LIB_FUZZING_ENGINE) -std=c++17 fuzzer.cpp -DPYTHON_HARNESS_PATH="\"locale.py\"" -ldl $(LDFLAGS) -o fuzzer-locale
diff --git a/fuzz_targets.txt b/fuzz_targets.txt
index 8710a5f..dd0d14e 100644
--- a/fuzz_targets.txt
+++ b/fuzz_targets.txt
@@ -7,6 +7,7 @@ email email.py
 html html.py
 httpclient httpclient.py
 json json.py
+locale locale.py
 plistlib plist.py
 re re.py
 tarfile tarfile.py
diff --git a/locale.py b/locale.py
new file mode 100644
index 0000000..3e6e90e
--- /dev/null
+++ b/locale.py
@@ -0,0 +1,37 @@
+from fuzzeddataprovider import FuzzedDataProvider
+import locale
+
+OP_STRXFRM = 0
+OP_STRCOLL = 1
+
+
+# Fuzzes the _locale C module (Modules/_localemodule.c).
+# Exercises locale.strxfrm() for locale-aware string transformation
+# and locale.strcoll() for locale-aware string comparison, both with
+# fuzz-generated Unicode input.
+def FuzzerRunOne(FuzzerInput):
+    if len(FuzzerInput) < 1 or len(FuzzerInput) > 0x10000:
+        return
+    fdp = FuzzedDataProvider(FuzzerInput)
+    target = fdp.ConsumeIntInRange(OP_STRXFRM, OP_STRCOLL)
+    n = (
+        fdp.ConsumeIntInRange(1, min(fdp.remaining_bytes(), 10000))
+        if fdp.remaining_bytes() > 0
+        else 0
+    )
+    if n == 0:
+        return
+    s = fdp.ConsumeUnicode(n)
+    try:
+        if target == OP_STRXFRM:
+            locale.strxfrm(s)
+        elif target == OP_STRCOLL:
+            n2 = (
+                fdp.ConsumeIntInRange(1, min(fdp.remaining_bytes(), 10000))
+                if fdp.remaining_bytes() > 0
+                else 0
+            )
+            s2 = fdp.ConsumeUnicode(n2) if n2 > 0 else ""
+            locale.strcoll(s, s2)
+    except Exception:
+        pass