diff options
| author | Aaron Ballman <aaron@aaronballman.com> | 2015-01-29 15:49:22 +0000 |
|---|---|---|
| committer | Aaron Ballman <aaron@aaronballman.com> | 2015-01-29 15:49:22 +0000 |
| commit | 7b54ed221a20d30b6a67f4544b75da5b6d4d4380 (patch) | |
| tree | b953ad1d38f66558e8f776232e4c601a34507c77 /llvm/lib/Fuzzer/FuzzerLoop.cpp | |
| parent | 4b2f17a1d333ba539b219c400000d1ca2be4c7a4 (diff) | |
| download | bcm5719-llvm-7b54ed221a20d30b6a67f4544b75da5b6d4d4380.tar.gz bcm5719-llvm-7b54ed221a20d30b6a67f4544b75da5b6d4d4380.zip | |
Temporarily reverting the fuzzer library as it causes too many build issues for MSVC users. This reverts: 227445, 227395, 227389, 227357, 227254, 227252
llvm-svn: 227452
Diffstat (limited to 'llvm/lib/Fuzzer/FuzzerLoop.cpp')
| -rw-r--r-- | llvm/lib/Fuzzer/FuzzerLoop.cpp | 170 |
1 files changed, 0 insertions, 170 deletions
diff --git a/llvm/lib/Fuzzer/FuzzerLoop.cpp b/llvm/lib/Fuzzer/FuzzerLoop.cpp deleted file mode 100644 index 1f2193a45b3..00000000000 --- a/llvm/lib/Fuzzer/FuzzerLoop.cpp +++ /dev/null @@ -1,170 +0,0 @@ -//===- FuzzerLoop.cpp - Fuzzer's main loop --------------------------------===// -// -// The LLVM Compiler Infrastructure -// -// This file is distributed under the University of Illinois Open Source -// License. See LICENSE.TXT for details. -// -//===----------------------------------------------------------------------===// -// Fuzzer's main loop. -//===----------------------------------------------------------------------===// - -#include "FuzzerInternal.h" -#include <sanitizer/asan_interface.h> -#include <algorithm> -#include <string> -#include <iostream> -#include <stdlib.h> - -// This function should be defined by the user. -extern "C" void TestOneInput(const uint8_t *Data, size_t Size); - -namespace fuzzer { - -// static -Unit Fuzzer::CurrentUnit; -system_clock::time_point Fuzzer::UnitStartTime; - -void Fuzzer::SetDeathCallback() { - __sanitizer_set_death_callback(DeathCallback); -} - -void Fuzzer::DeathCallback() { - std::cerr << "DEATH: " << std::endl; - Print(CurrentUnit, "\n"); - PrintASCII(CurrentUnit, "\n"); - WriteToCrash(CurrentUnit, "crash-"); -} - -void Fuzzer::AlarmCallback() { - size_t Seconds = - duration_cast<seconds>(system_clock::now() - UnitStartTime).count(); - std::cerr << "ALARM: working on the last Unit for " << Seconds << " seconds" - << std::endl; - if (Seconds >= 3) { - Print(CurrentUnit, "\n"); - PrintASCII(CurrentUnit, "\n"); - WriteToCrash(CurrentUnit, "timeout-"); - } - exit(1); -} - -void Fuzzer::ShuffleAndMinimize() { - if (Options.Verbosity) - std::cerr << "Shuffle: " << Corpus.size() << "\n"; - std::vector<Unit> NewCorpus; - random_shuffle(Corpus.begin(), Corpus.end()); - size_t MaxCov = 0; - Unit &U = CurrentUnit; - for (const auto &C : Corpus) { - for (size_t First = 0; First < 1; First++) { - U.clear(); - size_t Last = std::min(First + Options.MaxLen, C.size()); - U.insert(U.begin(), C.begin() + First, C.begin() + Last); - size_t NewCoverage = RunOne(U); - if (NewCoverage) { - MaxCov = NewCoverage; - NewCorpus.push_back(U); - if (Options.Verbosity >= 2) - std::cerr << "NEW0: " << NewCoverage << "\n"; - } - } - } - Corpus = NewCorpus; - if (Options.Verbosity) - std::cerr << "Shuffle done: " << Corpus.size() << " IC: " << MaxCov << "\n"; -} - -size_t Fuzzer::RunOne(const Unit &U) { - UnitStartTime = system_clock::now(); - TotalNumberOfRuns++; - size_t OldCoverage = __sanitizer_get_total_unique_coverage(); - TestOneInput(U.data(), U.size()); - size_t NewCoverage = __sanitizer_get_total_unique_coverage(); - if (!(TotalNumberOfRuns & (TotalNumberOfRuns - 1)) && Options.Verbosity) { - size_t Seconds = - duration_cast<seconds>(system_clock::now() - ProcessStartTime).count(); - std::cerr - << "#" << TotalNumberOfRuns - << "\tcov: " << NewCoverage - << "\texec/s: " << (Seconds ? TotalNumberOfRuns / Seconds : 0) << "\n"; - } - if (NewCoverage > OldCoverage) - return NewCoverage; - return 0; -} - -void Fuzzer::WriteToOutputCorpus(const Unit &U) { - if (Options.OutputCorpus.empty()) return; - std::string Path = DirPlusFile(Options.OutputCorpus, Hash(U)); - WriteToFile(U, Path); - if (Options.Verbosity >= 2) - std::cerr << "Written to " << Path << std::endl; -} - -void Fuzzer::WriteToCrash(const Unit &U, const char *Prefix) { - std::string Path = Prefix + Hash(U); - WriteToFile(U, Path); - std::cerr << "CRASHED; file written to " << Path << std::endl; -} - -void Fuzzer::SaveCorpus() { - if (Options.OutputCorpus.empty()) return; - for (const auto &U : Corpus) - WriteToFile(U, DirPlusFile(Options.OutputCorpus, Hash(U))); - if (Options.Verbosity) - std::cerr << "Written corpus of " << Corpus.size() << " files to " - << Options.OutputCorpus << "\n"; -} - -size_t Fuzzer::MutateAndTestOne(Unit *U) { - size_t NewUnits = 0; - for (size_t i = 0; i < Options.MutateDepth; i++) { - Mutate(U, Options.MaxLen); - if (U->empty()) continue; - size_t NewCoverage = RunOne(*U); - if (NewCoverage) { - Corpus.push_back(*U); - NewUnits++; - if (Options.Verbosity) { - std::cerr << "#" << TotalNumberOfRuns - << "\tNEW: " << NewCoverage - << " L: " << U->size() - << "\t"; - if (U->size() < 30) { - PrintASCII(*U); - std::cerr << "\t"; - Print(*U); - } - std::cerr << "\n"; - } - WriteToOutputCorpus(*U); - if (Options.ExitOnFirst) - exit(0); - } - } - return NewUnits; -} - -size_t Fuzzer::Loop(size_t NumIterations) { - size_t NewUnits = 0; - for (size_t i = 1; i <= NumIterations; i++) { - if (Options.DoCrossOver) { - for (size_t J1 = 0; J1 < Corpus.size(); J1++) { - for (size_t J2 = 0; J2 < Corpus.size(); J2++) { - CurrentUnit.clear(); - CrossOver(Corpus[J1], Corpus[J2], &CurrentUnit, Options.MaxLen); - NewUnits += MutateAndTestOne(&CurrentUnit); - } - } - } else { // No CrossOver - for (size_t J = 0; J < Corpus.size(); J++) { - CurrentUnit = Corpus[J]; - NewUnits += MutateAndTestOne(&CurrentUnit); - } - } - } - return NewUnits; -} - -} // namespace fuzzer |

