/src/immer/extra/fuzzer/flex-vector-bo.cpp
Line | Count | Source |
1 | | // |
2 | | // immer: immutable data structures for C++ |
3 | | // Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente |
4 | | // |
5 | | // This software is distributed under the Boost Software License, Version 1.0. |
6 | | // See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt |
7 | | // |
8 | | |
9 | | #include "fuzzer_input.hpp" |
10 | | |
11 | | #include <immer/box.hpp> |
12 | | #include <immer/flex_vector.hpp> |
13 | | |
14 | | #include <array> |
15 | | |
16 | | using bo_memory = immer::memory_policy<immer::heap_policy<immer::cpp_heap>, |
17 | | immer::unsafe_refcount_policy, |
18 | | immer::no_lock_policy, |
19 | | immer::no_transience_policy, |
20 | | true>; |
21 | | |
22 | | extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t* data, |
23 | | std::size_t size) |
24 | 11.1k | { |
25 | 11.1k | constexpr auto var_count = 8; |
26 | 11.1k | constexpr auto bits = 3; |
27 | | |
28 | 11.1k | using vector_t = immer::flex_vector<int, bo_memory, bits, bits>; |
29 | 11.1k | using size_t = std::uint8_t; |
30 | | |
31 | 11.1k | auto vars = std::array<vector_t, var_count>{}; |
32 | | |
33 | 6.39M | auto is_valid_var = [&](auto idx) { return idx >= 0 && idx < var_count; }; |
34 | 1.20M | auto is_valid_var_neq = [](auto other) { |
35 | 1.26M | return [=](auto idx) { |
36 | 1.26M | return idx >= 0 && idx < var_count && idx != other; |
37 | 1.26M | }; |
38 | 1.20M | }; |
39 | 201k | auto is_valid_index = [](auto& v) { |
40 | 210k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; |
41 | 201k | }; |
42 | 136k | auto is_valid_size = [](auto& v) { |
43 | 149k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; |
44 | 136k | }; |
45 | 1.86M | auto can_concat = [](auto&& v1, auto&& v2) { |
46 | 1.86M | return v1.size() + v2.size() < vector_t::max_size(); |
47 | 1.86M | }; |
48 | 81.7k | auto can_compare = [](auto&& v) { |
49 | | // avoid comparing vectors that are too big, and hence, slow to compare |
50 | 81.7k | return v.size() < (1 << 15); |
51 | 81.7k | }; |
52 | 2.69M | return fuzzer_input{data, size}.run([&](auto& in) { |
53 | 2.69M | enum ops |
54 | 2.69M | { |
55 | 2.69M | op_push_back, |
56 | 2.69M | op_update, |
57 | 2.69M | op_take, |
58 | 2.69M | op_drop, |
59 | 2.69M | op_concat, |
60 | 2.69M | op_push_back_move, |
61 | 2.69M | op_update_move, |
62 | 2.69M | op_take_move, |
63 | 2.69M | op_drop_move, |
64 | 2.69M | op_concat_move_l, |
65 | 2.69M | op_concat_move_r, |
66 | 2.69M | op_concat_move_lr, |
67 | 2.69M | op_insert, |
68 | 2.69M | op_erase, |
69 | 2.69M | op_compare, |
70 | 2.69M | }; |
71 | 2.69M | auto src = read<char>(in, is_valid_var); |
72 | 2.69M | auto dst = read<char>(in, is_valid_var); |
73 | 2.69M | switch (read<char>(in)) { |
74 | 361k | case op_push_back: { |
75 | 361k | vars[dst] = vars[src].push_back(42); |
76 | 361k | break; |
77 | 0 | } |
78 | 158k | case op_update: { |
79 | 158k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
80 | 158k | vars[dst] = vars[src].update(idx, [](auto x) { return x + 1; }); |
81 | 158k | break; |
82 | 0 | } |
83 | 1.81k | case op_take: { |
84 | 1.81k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
85 | 1.81k | vars[dst] = vars[src].take(idx); |
86 | 1.81k | break; |
87 | 0 | } |
88 | 16.2k | case op_drop: { |
89 | 16.2k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
90 | 16.2k | vars[dst] = vars[src].drop(idx); |
91 | 16.2k | break; |
92 | 0 | } |
93 | 658k | case op_concat: { |
94 | 658k | auto src2 = read<char>(in, is_valid_var); |
95 | 658k | if (can_concat(vars[src], vars[src2])) |
96 | 644k | vars[dst] = vars[src] + vars[src2]; |
97 | 658k | break; |
98 | 0 | } |
99 | 21.0k | case op_push_back_move: { |
100 | 21.0k | vars[dst] = std::move(vars[src]).push_back(21); |
101 | 21.0k | break; |
102 | 0 | } |
103 | 37.2k | case op_update_move: { |
104 | 37.2k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
105 | 37.2k | vars[dst] = |
106 | 37.2k | std::move(vars[src]).update(idx, [](auto x) { return x + 1; }); |
107 | 37.2k | break; |
108 | 0 | } |
109 | 35.7k | case op_take_move: { |
110 | 35.7k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
111 | 35.7k | vars[dst] = std::move(vars[src]).take(idx); |
112 | 35.7k | break; |
113 | 0 | } |
114 | 65.1k | case op_drop_move: { |
115 | 65.1k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
116 | 65.1k | vars[dst] = std::move(vars[src]).drop(idx); |
117 | 65.1k | break; |
118 | 0 | } |
119 | 226k | case op_concat_move_l: { |
120 | 226k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
121 | 226k | if (can_concat(vars[src], vars[src2])) |
122 | 222k | vars[dst] = std::move(vars[src]) + vars[src2]; |
123 | 226k | break; |
124 | 0 | } |
125 | 4.10k | case op_concat_move_r: { |
126 | 4.10k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
127 | 4.10k | if (can_concat(vars[src], vars[src2])) |
128 | 3.64k | vars[dst] = vars[src] + std::move(vars[src2]); |
129 | 4.10k | break; |
130 | 0 | } |
131 | 974k | case op_concat_move_lr: { |
132 | 974k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
133 | 974k | if (can_concat(vars[src], vars[src2])) |
134 | 963k | vars[dst] = std::move(vars[src]) + std::move(vars[src2]); |
135 | 974k | break; |
136 | 0 | } |
137 | 81.7k | case op_compare: { |
138 | 81.7k | using std::swap; |
139 | 81.7k | if (can_compare(vars[src]) && vars[src] == vars[dst]) |
140 | 5.70k | swap(vars[src], vars[dst]); |
141 | 81.7k | break; |
142 | 0 | } |
143 | 6.07k | case op_erase: { |
144 | 6.07k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
145 | 6.07k | vars[dst] = vars[src].erase(idx); |
146 | 6.07k | break; |
147 | 0 | } |
148 | 17.4k | case op_insert: { |
149 | 17.4k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
150 | 17.4k | vars[dst] = vars[src].insert(idx, immer::box<int>{42}); |
151 | 17.4k | break; |
152 | 0 | } |
153 | 20.2k | default: |
154 | 20.2k | break; |
155 | 2.69M | }; |
156 | 2.68M | return true; |
157 | 2.69M | }); |
158 | 11.1k | } |