/src/immer/extra/fuzzer/flex-vector-st.cpp
Line | Count | Source |
1 | | // |
2 | | // immer: immutable data structures for C++ |
3 | | // Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente |
4 | | // |
5 | | // This software is distributed under the Boost Software License, Version 1.0. |
6 | | // See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt |
7 | | // |
8 | | |
9 | | #include "fuzzer_input.hpp" |
10 | | |
11 | | #include <immer/box.hpp> |
12 | | #include <immer/flex_vector.hpp> |
13 | | |
14 | | #include <array> |
15 | | |
16 | | using st_memory = immer::memory_policy<immer::heap_policy<immer::cpp_heap>, |
17 | | immer::unsafe_refcount_policy, |
18 | | immer::no_lock_policy, |
19 | | immer::no_transience_policy, |
20 | | false>; |
21 | | |
22 | | extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t* data, |
23 | | std::size_t size) |
24 | 86.4k | { |
25 | 86.4k | constexpr auto var_count = 8; |
26 | 86.4k | constexpr auto bits = 3; |
27 | | |
28 | 86.4k | using vector_t = immer::flex_vector<int, st_memory, bits, bits>; |
29 | 86.4k | using size_t = std::uint8_t; |
30 | | |
31 | 86.4k | auto vars = std::array<vector_t, var_count>{}; |
32 | | |
33 | 6.04M | auto is_valid_var = [&](auto idx) { return idx >= 0 && idx < var_count; }; |
34 | 884k | auto is_valid_var_neq = [](auto other) { |
35 | 974k | return [=](auto idx) { |
36 | 974k | return idx >= 0 && idx < var_count && idx != other; |
37 | 974k | }; |
38 | 884k | }; |
39 | 185k | auto is_valid_index = [](auto& v) { |
40 | 190k | return [&](auto idx) { return idx >= 0 && idx < v.size(); }; |
41 | 185k | }; |
42 | 129k | auto is_valid_size = [](auto& v) { |
43 | 139k | return [&](auto idx) { return idx >= 0 && idx <= v.size(); }; |
44 | 129k | }; |
45 | 1.66M | auto can_concat = [](const auto& v1, const auto& v2) { |
46 | | // First, check max_size |
47 | 1.66M | if (v1.size() + v2.size() > vector_t::max_size()) { |
48 | 36.6k | return false; |
49 | 36.6k | } |
50 | | |
51 | | // But just checking max_size is not sufficient, because there are other |
52 | | // conditions for the validity of the tree, like shift constraints, for |
53 | | // example. |
54 | 1.62M | try { |
55 | | // Try to concat and catch an exception if it fails |
56 | 1.62M | const auto v3 = v1 + v2; |
57 | 1.62M | if (v3.size()) { |
58 | 1.62M | return true; |
59 | 1.62M | } |
60 | 1.62M | } catch (const immer::detail::rbts::invalid_tree&) { |
61 | 497 | return false; |
62 | 497 | } |
63 | 1.29k | return true; |
64 | 1.62M | }; |
65 | 86.4k | auto can_compare = [](auto&& v) { |
66 | | // avoid comparing vectors that are too big, and hence, slow to compare |
67 | 35.9k | return v.size() < (1 << 15); |
68 | 35.9k | }; |
69 | 2.35M | return fuzzer_input{data, size}.run([&](auto& in) { |
70 | 2.35M | enum ops |
71 | 2.35M | { |
72 | 2.35M | op_push_back, |
73 | 2.35M | op_update, |
74 | 2.35M | op_take, |
75 | 2.35M | op_drop, |
76 | 2.35M | op_concat, |
77 | 2.35M | op_push_back_move, |
78 | 2.35M | op_update_move, |
79 | 2.35M | op_take_move, |
80 | 2.35M | op_drop_move, |
81 | 2.35M | op_concat_move_l, |
82 | 2.35M | op_concat_move_r, |
83 | 2.35M | op_concat_move_lr, |
84 | 2.35M | op_insert, |
85 | 2.35M | op_erase, |
86 | 2.35M | op_compare, |
87 | 2.35M | }; |
88 | 2.35M | auto src = read<char>(in, is_valid_var); |
89 | 2.35M | auto dst = read<char>(in, is_valid_var); |
90 | 2.35M | switch (read<char>(in)) { |
91 | 282k | case op_push_back: { |
92 | 282k | vars[dst] = vars[src].push_back(42); |
93 | 282k | break; |
94 | 0 | } |
95 | 166k | case op_update: { |
96 | 166k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
97 | 166k | vars[dst] = vars[src].update(idx, [](auto x) { return x + 1; }); |
98 | 166k | break; |
99 | 0 | } |
100 | 1.62k | case op_take: { |
101 | 1.62k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
102 | 1.62k | vars[dst] = vars[src].take(idx); |
103 | 1.62k | break; |
104 | 0 | } |
105 | 7.16k | case op_drop: { |
106 | 7.16k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
107 | 7.16k | vars[dst] = vars[src].drop(idx); |
108 | 7.16k | break; |
109 | 0 | } |
110 | 782k | case op_concat: { |
111 | 782k | auto src2 = read<char>(in, is_valid_var); |
112 | 782k | if (can_concat(vars[src], vars[src2])) |
113 | 764k | vars[dst] = vars[src] + vars[src2]; |
114 | 782k | break; |
115 | 0 | } |
116 | 12.9k | case op_push_back_move: { |
117 | 12.9k | vars[dst] = std::move(vars[src]).push_back(21); |
118 | 12.9k | break; |
119 | 0 | } |
120 | 14.1k | case op_update_move: { |
121 | 14.1k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
122 | 14.1k | vars[dst] = |
123 | 14.1k | std::move(vars[src]).update(idx, [](auto x) { return x + 1; }); |
124 | 14.1k | break; |
125 | 0 | } |
126 | 35.6k | case op_take_move: { |
127 | 35.6k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
128 | 35.6k | vars[dst] = std::move(vars[src]).take(idx); |
129 | 35.6k | break; |
130 | 0 | } |
131 | 68.2k | case op_drop_move: { |
132 | 68.2k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
133 | 68.2k | vars[dst] = std::move(vars[src]).drop(idx); |
134 | 68.2k | break; |
135 | 0 | } |
136 | 432k | case op_concat_move_l: { |
137 | 432k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
138 | 432k | if (can_concat(vars[src], vars[src2])) |
139 | 426k | vars[dst] = std::move(vars[src]) + vars[src2]; |
140 | 432k | break; |
141 | 0 | } |
142 | 4.04k | case op_concat_move_r: { |
143 | 4.04k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
144 | 4.04k | if (can_concat(vars[src], vars[src2])) |
145 | 3.77k | vars[dst] = vars[src] + std::move(vars[src2]); |
146 | 4.04k | break; |
147 | 0 | } |
148 | 448k | case op_concat_move_lr: { |
149 | 448k | auto src2 = read<char>(in, is_valid_var_neq(src)); |
150 | 448k | if (can_concat(vars[src], vars[src2])) |
151 | 434k | vars[dst] = std::move(vars[src]) + std::move(vars[src2]); |
152 | 448k | break; |
153 | 0 | } |
154 | 35.9k | case op_compare: { |
155 | 35.9k | using std::swap; |
156 | 35.9k | if (can_compare(vars[src]) && vars[src] == vars[dst]) |
157 | 7.16k | swap(vars[src], vars[dst]); |
158 | 35.9k | break; |
159 | 0 | } |
160 | 4.10k | case op_erase: { |
161 | 4.10k | auto idx = read<size_t>(in, is_valid_index(vars[src])); |
162 | 4.10k | vars[dst] = vars[src].erase(idx); |
163 | 4.10k | break; |
164 | 0 | } |
165 | 16.8k | case op_insert: { |
166 | 16.8k | auto idx = read<size_t>(in, is_valid_size(vars[src])); |
167 | 16.8k | vars[dst] = vars[src].insert(idx, immer::box<int>{42}); |
168 | 16.8k | break; |
169 | 0 | } |
170 | 34.4k | default: |
171 | 34.4k | break; |
172 | 2.35M | }; |
173 | 2.34M | return true; |
174 | 2.35M | }); |
175 | 86.4k | } |