/src/immer/extra/fuzzer/flex-vector-st.cpp
Line | Count | Source |
1 | | // |
2 | | // immer: immutable data structures for C++ |
3 | | // Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente |
4 | | // |
5 | | // This software is distributed under the Boost Software License, Version 1.0. |
6 | | // See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt |
7 | | // |
8 | | |
9 | | #include "fuzzer_input.hpp" |
10 | | |
11 | | #include <immer/box.hpp> |
12 | | #include <immer/flex_vector.hpp> |
13 | | |
14 | | #include <array> |
15 | | |
16 | | using st_memory = immer::memory_policy<immer::heap_policy<immer::cpp_heap>, |
17 | | immer::unsafe_refcount_policy, |
18 | | immer::no_lock_policy, |
19 | | immer::no_transience_policy, |
20 | | false>; |
21 | | |
22 | | extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t* data, |
23 | | std::size_t size) |
24 | 9.84k | { |
25 | 9.84k | constexpr auto var_count = 8; |
26 | 9.84k | constexpr auto bits = 3; |
27 | | |
28 | 9.84k | using vector_t = immer::flex_vector<int, st_memory, bits, bits>; |
29 | 9.84k | using size_t = std::uint8_t; |
30 | | |
31 | 9.84k | auto vars = std::array<vector_t, var_count>{}; |
32 | | |
33 | 5.48M | auto is_valid_var = [&](auto idx) { return idx >= 0 && idx < var_count; }; |
34 | 742k | auto is_valid_var_neq = [](auto other) { |
35 | 817k | return [=](auto idx) { |
36 | 817k | return idx >= 0 && idx < var_count && idx != other; |
37 | 817k | }; |
38 | 742k | }; |
39 | 186k | auto is_valid_index = [](auto& v) { |
40 | 236k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; |
41 | 186k | }; |
42 | 146k | auto is_valid_size = [](auto& v) { |
43 | 158k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; |
44 | 146k | }; |
45 | 1.43M | auto can_concat = [](const auto& v1, const auto& v2) { |
46 | | // First, check max_size |
47 | 1.43M | if (v1.size() + v2.size() > vector_t::max_size()) { |
48 | 31.1k | return false; |
49 | 31.1k | } |
50 | | |
51 | | // But just checking max_size is not sufficient, because there are other |
52 | | // conditions for the validity of the tree, like shift constraints, for |
53 | | // example. |
54 | 1.40M | try { |
55 | | // Try to concat and catch an exception if it fails |
56 | 1.40M | const auto v3 = v1 + v2; |
57 | 1.40M | if (v3.size()) { |
58 | 1.40M | return true; |
59 | 1.40M | } |
60 | 1.40M | } catch (const immer::detail::rbts::invalid_tree&) { |
61 | 535 | return false; |
62 | 535 | } |
63 | 1.38k | return true; |
64 | 1.40M | }; |
65 | 31.5k | auto can_compare = [](auto&& v) { |
66 | | // avoid comparing vectors that are too big, and hence, slow to compare |
67 | 31.5k | return v.size() < (1 << 15); |
68 | 31.5k | }; |
69 | 2.14M | return fuzzer_input{data, size}.run([&](auto& in) { |
70 | 2.14M | enum ops |
71 | 2.14M | { |
72 | 2.14M | op_push_back, |
73 | 2.14M | op_update, |
74 | 2.14M | op_take, |
75 | 2.14M | op_drop, |
76 | 2.14M | op_concat, |
77 | 2.14M | op_push_back_move, |
78 | 2.14M | op_update_move, |
79 | 2.14M | op_take_move, |
80 | 2.14M | op_drop_move, |
81 | 2.14M | op_concat_move_l, |
82 | 2.14M | op_concat_move_r, |
83 | 2.14M | op_concat_move_lr, |
84 | 2.14M | op_insert, |
85 | 2.14M | op_erase, |
86 | 2.14M | op_compare, |
87 | 2.14M | }; |
88 | 2.14M | auto src = read<char>(in, is_valid_var); |
89 | 2.14M | auto dst = read<char>(in, is_valid_var); |
90 | 2.14M | switch (read<char>(in)) { |
91 | 286k | case op_push_back: { |
92 | 286k | vars[dst] = vars[src].push_back(42); |
93 | 286k | break; |
94 | 0 | } |
95 | 165k | case op_update: { |
96 | 165k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
97 | 165k | vars[dst] = vars[src].update(idx, [](auto x) { return x + 1; }); |
98 | 165k | break; |
99 | 0 | } |
100 | 1.58k | case op_take: { |
101 | 1.58k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
102 | 1.58k | vars[dst] = vars[src].take(idx); |
103 | 1.58k | break; |
104 | 0 | } |
105 | 10.2k | case op_drop: { |
106 | 10.2k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
107 | 10.2k | vars[dst] = vars[src].drop(idx); |
108 | 10.2k | break; |
109 | 0 | } |
110 | 694k | case op_concat: { |
111 | 694k | auto src2 = read<char>(in, is_valid_var); |
112 | 694k | if (can_concat(vars[src], vars[src2])) |
113 | 680k | vars[dst] = vars[src] + vars[src2]; |
114 | 694k | break; |
115 | 0 | } |
116 | 12.7k | case op_push_back_move: { |
117 | 12.7k | vars[dst] = std::move(vars[src]).push_back(21); |
118 | 12.7k | break; |
119 | 0 | } |
120 | 17.7k | case op_update_move: { |
121 | 17.7k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
122 | 17.7k | vars[dst] = |
123 | 17.7k | std::move(vars[src]).update(idx, [](auto x) { return x + 1; }); |
124 | 17.7k | break; |
125 | 0 | } |
126 | 41.9k | case op_take_move: { |
127 | 41.9k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
128 | 41.9k | vars[dst] = std::move(vars[src]).take(idx); |
129 | 41.9k | break; |
130 | 0 | } |
131 | 76.1k | case op_drop_move: { |
132 | 76.1k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
133 | 76.1k | vars[dst] = std::move(vars[src]).drop(idx); |
134 | 76.1k | break; |
135 | 0 | } |
136 | 354k | case op_concat_move_l: { |
137 | 354k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
138 | 354k | if (can_concat(vars[src], vars[src2])) |
139 | 344k | vars[dst] = std::move(vars[src]) + vars[src2]; |
140 | 354k | break; |
141 | 0 | } |
142 | 3.82k | case op_concat_move_r: { |
143 | 3.82k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
144 | 3.82k | if (can_concat(vars[src], vars[src2])) |
145 | 3.54k | vars[dst] = vars[src] + std::move(vars[src2]); |
146 | 3.82k | break; |
147 | 0 | } |
148 | 384k | case op_concat_move_lr: { |
149 | 384k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
150 | 384k | if (can_concat(vars[src], vars[src2])) |
151 | 376k | vars[dst] = std::move(vars[src]) + std::move(vars[src2]); |
152 | 384k | break; |
153 | 0 | } |
154 | 31.5k | case op_compare: { |
155 | 31.5k | using std::swap; |
156 | 31.5k | if (can_compare(vars[src]) && vars[src] == vars[dst]) |
157 | 6.27k | swap(vars[src], vars[dst]); |
158 | 31.5k | break; |
159 | 0 | } |
160 | 4.07k | case op_erase: { |
161 | 4.07k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
162 | 4.07k | vars[dst] = vars[src].erase(idx); |
163 | 4.07k | break; |
164 | 0 | } |
165 | 16.2k | case op_insert: { |
166 | 16.2k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
167 | 16.2k | vars[dst] = vars[src].insert(idx, immer::box<int>{42}); |
168 | 16.2k | break; |
169 | 0 | } |
170 | 30.7k | default: |
171 | 30.7k | break; |
172 | 2.14M | }; |
173 | 2.13M | return true; |
174 | 2.14M | }); |
175 | 9.84k | } |