Coverage Report

Created: 2026-01-09 06:29

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/immer/extra/fuzzer/array-gc.cpp
Line
Count
Source
1
//
2
// immer: immutable data structures for C++
3
// Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente
4
//
5
// This software is distributed under the Boost Software License, Version 1.0.
6
// See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt
7
//
8
9
#include "fuzzer_gc_guard.hpp"
10
#include "fuzzer_input.hpp"
11
12
#include <immer/array.hpp>
13
#include <immer/array_transient.hpp>
14
#include <immer/heap/gc_heap.hpp>
15
#include <immer/refcount/no_refcount_policy.hpp>
16
17
#include <array>
18
19
using gc_memory = immer::memory_policy<immer::heap_policy<immer::gc_heap>,
20
                                       immer::no_refcount_policy,
21
                                       immer::default_lock_policy,
22
                                       immer::gc_transience_policy,
23
                                       false>;
24
25
extern "C" int LLVMFuzzerTestOneInput(const std::uint8_t* data,
26
                                      std::size_t size)
27
87.6k
{
28
87.6k
    constexpr auto var_count = 4;
29
30
87.6k
    auto guard = fuzzer_gc_guard{};
31
32
87.6k
    using array_t     = immer::array<int, gc_memory>;
33
87.6k
    using transient_t = typename array_t::transient_type;
34
87.6k
    using size_t      = std::uint8_t;
35
36
87.6k
    auto vs = std::array<array_t, var_count>{};
37
87.6k
    auto ts = std::array<transient_t, var_count>{};
38
39
1.66M
    auto is_valid_var   = [&](auto idx) { return idx >= 0 && idx < var_count; };
40
87.6k
    auto is_valid_index = [](auto& v) {
41
53.2k
        return [&](auto idx) { return idx >= 0 && idx < v.size(); };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) const
Line
Count
Source
41
21.1k
        return [&](auto idx) { return idx >= 0 && idx < v.size(); };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) const
Line
Count
Source
41
32.0k
        return [&](auto idx) { return idx >= 0 && idx < v.size(); };
42
15.3k
    };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const
Line
Count
Source
40
13.9k
    auto is_valid_index = [](auto& v) {
41
13.9k
        return [&](auto idx) { return idx >= 0 && idx < v.size(); };
42
13.9k
    };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_1::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const
Line
Count
Source
40
1.43k
    auto is_valid_index = [](auto& v) {
41
1.43k
        return [&](auto idx) { return idx >= 0 && idx < v.size(); };
42
1.43k
    };
43
87.6k
    auto is_valid_size = [](auto& v) {
44
22.3k
        return [&](auto idx) { return idx >= 0 && idx <= v.size(); };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) const
Line
Count
Source
44
11.9k
        return [&](auto idx) { return idx >= 0 && idx <= v.size(); };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const::{lambda(auto:1)#1}::operator()<unsigned char>(unsigned char) const
Line
Count
Source
44
10.4k
        return [&](auto idx) { return idx >= 0 && idx <= v.size(); };
45
8.42k
    };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const
Line
Count
Source
43
2.17k
    auto is_valid_size = [](auto& v) {
44
2.17k
        return [&](auto idx) { return idx >= 0 && idx <= v.size(); };
45
2.17k
    };
array-gc.cpp:auto LLVMFuzzerTestOneInput::$_2::operator()<immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> > >(immer::array_transient<int, immer::memory_policy<immer::heap_policy<immer::gc_heap>, immer::no_refcount_policy, immer::spinlock_policy, immer::gc_transience_policy, false, false> >&) const
Line
Count
Source
43
6.24k
    auto is_valid_size = [](auto& v) {
44
6.24k
        return [&](auto idx) { return idx >= 0 && idx <= v.size(); };
45
6.24k
    };
46
    // limit doing immutable pushes on vectors that are too big already to
47
    // prevent timeouts
48
1.49M
    auto too_big = [](auto&& v) { return v.size() > (std::size_t{1} << 10); };
49
1.54M
    return fuzzer_input{data, size}.run([&](auto& in) {
50
1.54M
        enum ops
51
1.54M
        {
52
1.54M
            op_transient,
53
1.54M
            op_persistent,
54
1.54M
            op_push_back,
55
1.54M
            op_update,
56
1.54M
            op_take,
57
1.54M
            op_push_back_mut,
58
1.54M
            op_update_mut,
59
1.54M
            op_take_mut,
60
1.54M
        };
61
1.54M
        auto dst = read<char>(in, is_valid_var);
62
1.54M
        switch (read<char>(in)) {
63
20.2k
        case op_transient: {
64
20.2k
            auto src = read<char>(in, is_valid_var);
65
20.2k
            ts[dst]  = vs[src].transient();
66
20.2k
            break;
67
0
        }
68
5.11k
        case op_persistent: {
69
5.11k
            auto src = read<char>(in, is_valid_var);
70
5.11k
            vs[dst]  = ts[src].persistent();
71
5.11k
            break;
72
0
        }
73
6.35k
        case op_push_back: {
74
6.35k
            auto src = read<char>(in, is_valid_var);
75
6.35k
            if (!too_big(vs[src]))
76
4.56k
                vs[dst] = vs[src].push_back(42);
77
6.35k
            break;
78
0
        }
79
14.0k
        case op_update: {
80
14.0k
            auto src = read<char>(in, is_valid_var);
81
14.0k
            auto idx = read<size_t>(in, is_valid_index(vs[src]));
82
14.0k
            vs[dst]  = vs[src].update(idx, [](auto x) { return x + 1; });
83
14.0k
            break;
84
0
        }
85
2.21k
        case op_take: {
86
2.21k
            auto src = read<char>(in, is_valid_var);
87
2.21k
            auto idx = read<size_t>(in, is_valid_size(vs[src]));
88
2.21k
            vs[dst]  = vs[src].take(idx);
89
2.21k
            break;
90
0
        }
91
1.48M
        case op_push_back_mut: {
92
1.48M
            if (!too_big(vs[dst]))
93
1.41M
                ts[dst].push_back(13);
94
1.48M
            break;
95
0
        }
96
1.43k
        case op_update_mut: {
97
1.43k
            auto idx = read<size_t>(in, is_valid_index(ts[dst]));
98
1.43k
            ts[dst].update(idx, [](auto x) { return x + 1; });
99
1.43k
            break;
100
0
        }
101
6.24k
        case op_take_mut: {
102
6.24k
            auto idx = read<size_t>(in, is_valid_size(ts[dst]));
103
6.24k
            ts[dst].take(idx);
104
6.24k
            break;
105
0
        }
106
3.14k
        default:
107
3.14k
            break;
108
1.54M
        };
109
1.54M
        return true;
110
1.54M
    });
111
87.6k
}