From 6e47a10ec72396c782403f6038d459413f82e192 Mon Sep 17 00:00:00 2001 From: Kostya Serebryany Date: Thu, 19 Jan 2017 19:07:26 +0000 Subject: [libFuzzer] add two tests for experimenting with equivalence fuzzing llvm-svn: 292509 --- llvm/lib/Fuzzer/test/CMakeLists.txt | 2 ++ llvm/lib/Fuzzer/test/EquivalenceATest.cpp | 15 +++++++++++++++ llvm/lib/Fuzzer/test/EquivalenceBTest.cpp | 26 ++++++++++++++++++++++++++ 3 files changed, 43 insertions(+) create mode 100644 llvm/lib/Fuzzer/test/EquivalenceATest.cpp create mode 100644 llvm/lib/Fuzzer/test/EquivalenceBTest.cpp (limited to 'llvm/lib/Fuzzer/test') diff --git a/llvm/lib/Fuzzer/test/CMakeLists.txt b/llvm/lib/Fuzzer/test/CMakeLists.txt index a95b5e7fc55..2359c208ab0 100644 --- a/llvm/lib/Fuzzer/test/CMakeLists.txt +++ b/llvm/lib/Fuzzer/test/CMakeLists.txt @@ -72,6 +72,8 @@ set(Tests CustomMutatorTest DivTest EmptyTest + EquivalenceATest + EquivalenceBTest FourIndependentBranchesTest FullCoverageSetTest InitializeTest diff --git a/llvm/lib/Fuzzer/test/EquivalenceATest.cpp b/llvm/lib/Fuzzer/test/EquivalenceATest.cpp new file mode 100644 index 00000000000..101fe127f5d --- /dev/null +++ b/llvm/lib/Fuzzer/test/EquivalenceATest.cpp @@ -0,0 +1,15 @@ +// This file is distributed under the University of Illinois Open Source +// License. See LICENSE.TXT for details. +#include +#include + +// Test for libFuzzer's "equivalence" fuzzing, part A. +extern "C" void LLVMFuzzerAnnounceOutput(const uint8_t *Data, size_t Size); +extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { + if (Size > 100) return 0; + uint8_t Result[100]; + for (size_t i = 0; i < Size; i++) + Result[Size - i - 1] = Data[i]; + LLVMFuzzerAnnounceOutput(Result, Size); + return 0; +} diff --git a/llvm/lib/Fuzzer/test/EquivalenceBTest.cpp b/llvm/lib/Fuzzer/test/EquivalenceBTest.cpp new file mode 100644 index 00000000000..175eed1394f --- /dev/null +++ b/llvm/lib/Fuzzer/test/EquivalenceBTest.cpp @@ -0,0 +1,26 @@ +// This file is distributed under the University of Illinois Open Source +// License. See LICENSE.TXT for details. +#include +#include +#include + +// Test for libFuzzer's "equivalence" fuzzing, part B. +extern "C" void LLVMFuzzerAnnounceOutput(const uint8_t *Data, size_t Size); +extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) { + if (Size > 100) return 0; + uint8_t Result[100]; + for (size_t i = 0; i < Size; i++) + Result[Size - i - 1] = Data[i]; + + // Be a bit different from EquivalenceATest + if (Size > 42 && Data[10] == 'B') { + static int c; + if (!c) + fprintf(stderr, "ZZZZZZZ\n"); + c = 1; + Result[42]++; + } + + LLVMFuzzerAnnounceOutput(Result, Size); + return 0; +} -- cgit v1.2.3