tests/lapi: table tests

The patch adds a fuzzing tests for Lua table functions.

Author: ligurio

.luacheckrc

@@ -5,3 +5,9 @@ files["tests/capi/luaL_loadbuffer_proto/preamble.lua"] = {
         "211",
     },
 }
+
+globals = {
+    table = {
+        fields = { "create" }
+    }
+}

tests/lapi/table_concat_test.lua

@@ -0,0 +1,40 @@
+--[=[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+6.6 – Table Manipulation
+https://www.lua.org/manual/5.1/manual.html#5.5
+
+Infinite loop on table lookup,
+https://github.com/LuaJIT/LuaJIT/issues/494
+
+Synopsis: table.concat(list [, sep [, i [, j]]])
+--]=]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local str = fdp:consume_string(test_lib.MAX_STR_LEN)
+    local tbl_size = #str
+    -- io.stderr:write(tbl_size .. "\n")
+    if tbl_size <= 1 then
+        return -1
+    end
+    local tbl = {}
+    str:gsub(".", function(c)
+        table.insert(tbl, c)
+    end)
+    assert(#tbl, tbl_size)
+    -- local j = fdp:consume_integer(1, tbl_size)
+    -- local i = fdp:consume_integer(1, j)
+    -- local sep = ""
+    -- io.stderr:write(string.gsub(str, i, j) .. table.concat(tbl, sep, i, j) .. "\n")
+    -- assert(string.gsub(str, i, j) == table.concat(tbl, sep, i, j))
+end
+
+local args = {
+    artifact_prefix = "table_concat_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_create_test.lua

@@ -0,0 +1,40 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+Bad lookup generated by lj_record_idx in GC64,
+https://github.com/LuaJIT/LuaJIT/issues/840
+
+Synopsis:
+  LuaJIT: table.new(narray, nhash)
+  PUC Rio Lua: table.create(narray, nhash)
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+local table_create
+if test_lib.lua_version() == "LuaJIT" then
+    table_create = require("table.new")
+elseif test_lib.lua_current_version_lt_than(5, 5) then
+    -- New function 'table.create()' in PUC Rio Lua,
+    -- https://github.com/lua/lua/commit/3e9dbe143d3338f5f13a5e421ea593adff482da0
+    table_create = table.create
+else
+    print("Unsupported version.")
+    os.exit(0)
+end
+
+local function TestOneInput(buf)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    -- Beware, huge number triggers OOM or table overflow.
+    local MAX_N = 1000
+    local narray = fdp:consume_integer(0, MAX_N)
+    local nhash = fdp:consume_integer(0, MAX_N)
+    local _ = table_create(narray, nhash) -- luacheck: no unused
+end
+
+local args = {
+    artifact_prefix = "table_create_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_foreach_test.lua

@@ -0,0 +1,36 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+Bad loop initialization in table.foreach(),
+https://github.com/LuaJIT/LuaJIT/issues/844
+
+string.dump(table.foreach) will trigger an assert,
+https://github.com/LuaJIT/LuaJIT/issues/1038
+
+Synopsis: table.foreach(table, f)
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+-- Function `table.foreach` is deprecated in Lua 5.1.
+if test_lib.lua_current_version_ge_than(5, 2) then
+    print("Unsupported version.")
+    os.exit(0)
+end
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local count = fdp:consume_integer(1, test_lib.MAX_INT)
+    local tbl = fdp:consume_strings(test_lib.MAX_STR_LEN, count)
+    local i = 0
+    local fn = function(_idx) i = i + 1 end
+    table.foreach(tbl, fn)
+    assert(table.maxn(tbl) == i)
+end
+
+local args = {
+    artifact_prefix = "table_foreach_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_insert_test.lua

@@ -0,0 +1,27 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2024, Sergey Bronnikov.
+
+6.6 – Table Manipulation
+https://www.lua.org/manual/5.1/manual.html#5.5
+
+Synopsis: table.insert(list, [pos,] value)
+]]
+
+local luzer = require("luzer")
+
+local function TestOneInput(buf, _size)
+    local len = string.len(buf)
+    local tbl = {}
+    local pos = 1
+    buf:gsub(".", function(c)
+        table.insert(tbl, pos, c)
+        pos = pos + 1
+    end)
+    assert(pos, len)
+end
+
+local args = {
+    artifact_prefix = "table_insert_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_maxn_test.lua

@@ -0,0 +1,27 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+Synopsis: table.maxn(table)
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+if test_lib.lua_current_version_ge_than(5, 3) then
+    print("Unsupported version.")
+    os.exit(0)
+end
+
+local function TestOneInput(buf)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local count = fdp:consume_integer(0, test_lib.MAX_INT64)
+    local tbl = fdp:consume_strings(test_lib.MAX_STR_LEN, count)
+    local maxn = table.maxn(tbl)
+    assert(type(maxn) == "number")
+end
+
+local args = {
+    artifact_prefix = "table_maxn_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_move_test.lua

@@ -0,0 +1,26 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+Synopsis: table.move(a1, f, e, t [,a2])
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+if test_lib.lua_version() ~= "LuaJIT" then
+    print("Unsupported version.")
+    os.exit(0)
+end
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local count = fdp:consume_integer(0, test_lib.MAX_INT)
+    local tbl = fdp:consume_strings(test_lib.MAX_STR_LEN, count)
+    table.move(tbl, 1, #tbl, 1, {})
+end
+
+local args = {
+    artifact_prefix = "table_move_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_pack_test.lua

@@ -0,0 +1,35 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+6.6 – Table Manipulation
+https://www.lua.org/manual/5.1/manual.html#5.5
+
+Synopsis: table.pack(...)
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+if test_lib.lua_current_version_lt_than(5, 2) then
+    print("Unsupported version.")
+    os.exit(0)
+end
+
+local unpack = unpack or table.unpack
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    -- Beware, huge number triggers 'too many results to unpack'.
+    local MAX_N = 1000
+    local count = fdp:consume_integer(1, MAX_N)
+    local tbl = fdp:consume_integers(test_lib.MIN_INT, test_lib.MAX_INT, count)
+    local packed = table.pack(unpack(tbl))
+    assert(#packed == #tbl)
+    assert(packed[1] == tbl[1])
+end
+
+local args = {
+    artifact_prefix = "table_pack_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_remove_test.lua

@@ -0,0 +1,35 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+6.6 – Table Manipulation
+https://www.lua.org/manual/5.1/manual.html#5.5
+
+table.remove removes last element of a table when given an out-of-bound index,
+https://www.lua.org/bugs.html#5.1.2-10
+
+Synopsis: table.remove(list [, pos])
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+local MAX_INT = test_lib.MAX_INT
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local max_len = fdp:consume_integer(0, MAX_INT)
+    local str = fdp:consume_string(max_len)
+    local tbl = {}
+    str:gsub(".", function(c)
+        table.insert(tbl, c)
+    end)
+    for _ = 1, #tbl do
+        assert(tbl[1] == table.remove(tbl, 1))
+    end
+    assert(#tbl == 0)
+end
+
+local args = {
+    artifact_prefix = "table_remove_",
+}
+luzer.Fuzz(TestOneInput, nil, args)

tests/lapi/table_sort_test.lua

@@ -0,0 +1,29 @@
+--[[
+SPDX-License-Identifier: ISC
+Copyright (c) 2023-2025, Sergey Bronnikov.
+
+6.6 – Table Manipulation
+https://www.lua.org/manual/5.1/manual.html#5.5
+
+'table.sort' does not work for partial orders,
+https://github.com/lua/lua/commit/825ac8eca8e384d6ad2538b5670088c31e08a9d7
+
+Synopsis: table.sort(list [, comp])
+]]
+
+local luzer = require("luzer")
+local test_lib = require("lib")
+
+local function TestOneInput(buf, _size)
+    local fdp = luzer.FuzzedDataProvider(buf)
+    local max = fdp:consume_integer(0, test_lib.MAX_INT64)
+    local min = fdp:consume_integer(test_lib.MIN_INT64, 0)
+    local count = fdp:consume_integer(0, 1000)
+    local tbl = fdp:consume_integers(min, max, count)
+    table.sort(tbl)
+end
+
+local args = {
+    artifact_prefix = "table_sort_",
+}
+luzer.Fuzz(TestOneInput, nil, args)