/src/immer/extra/fuzzer/array-gc.cpp
Line | Count | Source |
1 | | // |
2 | | // immer: immutable data structures for C++ |
3 | | // Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente |
4 | | // |
5 | | // This software is distributed under the Boost Software License, Version 1.0. |
6 | | // See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt |
7 | | // |
8 | | |
9 | | #include "fuzzer_input.hpp" |
10 | | |
11 | | #include <immer/array.hpp> |
12 | | #include <immer/array_transient.hpp> |
13 | | #include <immer/heap/gc_heap.hpp> |
14 | | #include <immer/refcount/no_refcount_policy.hpp> |
15 | | |
16 | | #include <array> |
17 | | |
18 | | using gc_memory = immer::memory_policy<immer::heap_policy<immer::gc_heap>, |
19 | | immer::no_refcount_policy, |
20 | | immer::default_lock_policy, |
21 | | immer::gc_transience_policy, |
22 | | false>; |
23 | | |
24 | | extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t* data, |
25 | | std::size_t size) |
26 | 989 | { |
27 | 989 | constexpr auto var_count = 4; |
28 | | |
29 | 989 | auto guard = immer::gc_disable_guard{}; |
30 | | |
31 | 989 | using array_t = immer::array<int, gc_memory>; |
32 | 989 | using transient_t = typename array_t::transient_type; |
33 | 989 | using size_t = std::uint8_t; |
34 | | |
35 | 989 | auto vs = std::array<array_t, var_count>{}; |
36 | 989 | auto ts = std::array<transient_t, var_count>{}; |
37 | | |
38 | 1.74M | auto is_valid_var = [&](auto idx) { return idx >= 0 && idx < var_count; }; |
39 | 11.4k | auto is_valid_index = [](auto& v) { |
40 | 60.5k | return [&](auto idx) { return idx >= 0 && idx < v.size(); };array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) constLine | Count | Source | 40 | 30.0k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; |
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) constLine | Count | Source | 40 | 30.4k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; |
|
41 | 11.4k | }; array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const Line | Count | Source | 39 | 10.1k | auto is_valid_index = [](auto& v) { | 40 | 10.1k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; | 41 | 10.1k | }; |
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const Line | Count | Source | 39 | 1.25k | auto is_valid_index = [](auto& v) { | 40 | 1.25k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; | 41 | 1.25k | }; |
|
42 | 7.76k | auto is_valid_size = [](auto& v) { |
43 | 24.7k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); };array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) constLine | Count | Source | 43 | 15.9k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; |
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) constLine | Count | Source | 43 | 8.87k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; |
|
44 | 7.76k | }; array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const Line | Count | Source | 42 | 2.25k | auto is_valid_size = [](auto& v) { | 43 | 2.25k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; | 44 | 2.25k | }; |
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const Line | Count | Source | 42 | 5.50k | auto is_valid_size = [](auto& v) { | 43 | 5.50k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; | 44 | 5.50k | }; |
|
45 | | // limit doing immutable pushes on vectors that are too big already to |
46 | | // prevent timeouts |
47 | 1.57M | auto too_big = [](auto&& v) { return v.size() > (std::size_t{1} << 10); }; |
48 | 1.62M | return fuzzer_input{data, size}.run([&](auto& in) { |
49 | 1.62M | enum ops |
50 | 1.62M | { |
51 | 1.62M | op_transient, |
52 | 1.62M | op_persistent, |
53 | 1.62M | op_push_back, |
54 | 1.62M | op_update, |
55 | 1.62M | op_take, |
56 | 1.62M | op_push_back_mut, |
57 | 1.62M | op_update_mut, |
58 | 1.62M | op_take_mut, |
59 | 1.62M | }; |
60 | 1.62M | auto dst = read<char>(in, is_valid_var); |
61 | 1.62M | switch (read<char>(in)) { |
62 | 22.9k | case op_transient: { |
63 | 22.9k | auto src = read<char>(in, is_valid_var); |
64 | 22.9k | ts[dst] = vs[src].transient(); |
65 | 22.9k | break; |
66 | 0 | } |
67 | 4.70k | case op_persistent: { |
68 | 4.70k | auto src = read<char>(in, is_valid_var); |
69 | 4.70k | vs[dst] = ts[src].persistent(); |
70 | 4.70k | break; |
71 | 0 | } |
72 | 9.67k | case op_push_back: { |
73 | 9.67k | auto src = read<char>(in, is_valid_var); |
74 | 9.67k | if (!too_big(vs[src])) |
75 | 7.95k | vs[dst] = vs[src].push_back(42); |
76 | 9.67k | break; |
77 | 0 | } |
78 | 10.1k | case op_update: { |
79 | 10.1k | auto src = read<char>(in, is_valid_var); |
80 | 10.1k | auto idx = read<size_t>(in, is_valid_index(vs[src])); |
81 | 10.1k | vs[dst] = vs[src].update(idx, [](auto x) { return x + 1; }); |
82 | 10.1k | break; |
83 | 0 | } |
84 | 2.29k | case op_take: { |
85 | 2.29k | auto src = read<char>(in, is_valid_var); |
86 | 2.29k | auto idx = read<size_t>(in, is_valid_size(vs[src])); |
87 | 2.29k | vs[dst] = vs[src].take(idx); |
88 | 2.29k | break; |
89 | 0 | } |
90 | 1.56M | case op_push_back_mut: { |
91 | 1.56M | if (!too_big(vs[dst])) |
92 | 1.49M | ts[dst].push_back(13); |
93 | 1.56M | break; |
94 | 0 | } |
95 | 1.25k | case op_update_mut: { |
96 | 1.25k | auto idx = read<size_t>(in, is_valid_index(ts[dst])); |
97 | 1.25k | ts[dst].update(idx, [](auto x) { return x + 1; }); |
98 | 1.25k | break; |
99 | 0 | } |
100 | 5.50k | case op_take_mut: { |
101 | 5.50k | auto idx = read<size_t>(in, is_valid_size(ts[dst])); |
102 | 5.50k | ts[dst].take(idx); |
103 | 5.50k | break; |
104 | 0 | } |
105 | 2.68k | default: |
106 | 2.68k | break; |
107 | 1.62M | }; |
108 | 1.62M | return true; |
109 | 1.62M | }); |
110 | 989 | } |