fuzzer_main.cc File Reference

Shared execution for profile-split protobuf targets. More...

Go to the source code of this file.

Functions
std::size_t	LLVMFuzzerCustomMutator (std::uint8_t *data, std::size_t size, std::size_t max_size, unsigned int seed)
	Invoke this target's libFuzzer mutator from coverage-only corpus replay.
std::size_t	LLVMFuzzerCustomCrossOver (const std::uint8_t *data1, std::size_t size1, const std::uint8_t *data2, std::size_t size2, std::uint8_t *out, std::size_t max_out_size, unsigned int seed)
	Invoke this target's libFuzzer crossover from coverage-only corpus replay.
std::size_t	proto_fuzzer::ProtoFuzzerCustomMutator (std::uint8_t *data, std::size_t size, std::size_t max_size, unsigned int seed, const ProfileFuzzerTraits &traits)
	Mutate one serialized generated profile message.
std::size_t	proto_fuzzer::ProtoFuzzerCustomCrossOver (const std::uint8_t *data1, std::size_t size1, const std::uint8_t *data2, std::size_t size2, std::uint8_t *out, std::size_t max_out_size, unsigned int seed, const ProfileFuzzerTraits &traits)
	Cross two serialized generated profile messages of the same concrete type.
int	proto_fuzzer::ProtoFuzzerTestOneInput (const std::uint8_t *data, std::size_t size, const ProfileFuzzerTraits &traits)
	Load and execute one generated-profile input under its fixed target lane.

Detailed Description

Shared execution for profile-split protobuf targets.

Definition in file fuzzer_main.cc.

Function Documentation

LLVMFuzzerCustomCrossOver()

std::size_t LLVMFuzzerCustomCrossOver	(	const std::uint8_t *	data1,
		std::size_t	size1,
		const std::uint8_t *	data2,
		std::size_t	size2,
		std::uint8_t *	out,
		std::size_t	max_out_size,
		unsigned int	seed )

Invoke this target's libFuzzer crossover from coverage-only corpus replay.

Parameters

data1	Serialized first parent message.
size1	Number of bytes in data1.
data2	Serialized second parent message.
size2	Number of bytes in data2.
out	Destination buffer for the child message.
max_out_size	Capacity of out.
seed	Deterministic crossover seed.

Returns

Number of serialized bytes written to out.

LLVMFuzzerCustomMutator()

std::size_t LLVMFuzzerCustomMutator	(	std::uint8_t *	data,
		std::size_t	size,
		std::size_t	max_size,
		unsigned int	seed )

Invoke this target's libFuzzer mutator from coverage-only corpus replay.

Parameters

data	Serialized profile message buffer to mutate in place.
size	Number of input bytes currently stored in data.
max_size	Capacity of data available for the mutated message.
seed	Deterministic mutation seed.

Returns

Number of serialized bytes in the mutated message.

ProtoFuzzerCustomCrossOver()

std::size_t proto_fuzzer::ProtoFuzzerCustomCrossOver	(	const std::uint8_t *	data1,
		std::size_t	size1,
		const std::uint8_t *	data2,
		std::size_t	size2,
		std::uint8_t *	out,
		std::size_t	max_out_size,
		unsigned int	seed,
		const ProfileFuzzerTraits &	traits )

Cross two serialized generated profile messages of the same concrete type.

Parameters

data1	Serialized first parent message.
size1	Number of bytes in data1.
data2	Serialized second parent message.
size2	Number of bytes in data2.
out	Destination buffer for the crossed message.
max_out_size	Capacity of out.
seed	Deterministic crossover seed supplied by libFuzzer.
traits	Generated profile binding for this executable.

Returns

Number of serialized bytes written to out.

Definition at line 109 of file fuzzer_main.cc.

ProtoFuzzerCustomMutator()

std::size_t proto_fuzzer::ProtoFuzzerCustomMutator	(	std::uint8_t *	data,
		std::size_t	size,
		std::size_t	max_size,
		unsigned int	seed,
		const ProfileFuzzerTraits &	traits )

Mutate one serialized generated profile message.

Parameters

data	Serialized profile message buffer to mutate in place.
size	Number of input bytes currently stored in data.
max_size	Capacity of data available for the mutated message.
seed	Deterministic mutation seed supplied by libFuzzer.
traits	Generated profile binding for this executable.

Returns

Number of serialized bytes in the mutated message.

Definition at line 90 of file fuzzer_main.cc.

ProtoFuzzerTestOneInput()

int proto_fuzzer::ProtoFuzzerTestOneInput	(	const std::uint8_t *	data,
		std::size_t	size,
		const ProfileFuzzerTraits &	traits )

Load and execute one generated-profile input under its fixed target lane.

Parameters

data	Serialized generated-profile input bytes.
size	Number of bytes available at data.
traits	Generated profile binding selected by the entrypoint.

Returns

Always zero, as required by the libFuzzer entrypoint contract.

Definition at line 124 of file fuzzer_main.cc.