xref: /netbsd-src/sys/external/bsd/compiler_rt/dist/lib/fuzzer/tests/FuzzerUnittest.cpp (revision a7c257b03e4462df2b1020128fb82716512d7856)
1*a7c257b0Skamil // This file is distributed under the University of Illinois Open Source
2*a7c257b0Skamil // License. See LICENSE.TXT for details.
3*a7c257b0Skamil 
4*a7c257b0Skamil // Avoid ODR violations (LibFuzzer is built without ASan and this test is built
5*a7c257b0Skamil // with ASan) involving C++ standard library types when using libcxx.
6*a7c257b0Skamil #define _LIBCPP_HAS_NO_ASAN
7*a7c257b0Skamil 
8*a7c257b0Skamil // Do not attempt to use LLVM ostream from gtest.
9*a7c257b0Skamil #define GTEST_NO_LLVM_RAW_OSTREAM 1
10*a7c257b0Skamil 
11*a7c257b0Skamil #include "FuzzerCorpus.h"
12*a7c257b0Skamil #include "FuzzerDictionary.h"
13*a7c257b0Skamil #include "FuzzerInternal.h"
14*a7c257b0Skamil #include "FuzzerMerge.h"
15*a7c257b0Skamil #include "FuzzerMutate.h"
16*a7c257b0Skamil #include "FuzzerRandom.h"
17*a7c257b0Skamil #include "FuzzerTracePC.h"
18*a7c257b0Skamil #include "gtest/gtest.h"
19*a7c257b0Skamil #include <memory>
20*a7c257b0Skamil #include <set>
21*a7c257b0Skamil #include <sstream>
22*a7c257b0Skamil 
23*a7c257b0Skamil using namespace fuzzer;
24*a7c257b0Skamil 
25*a7c257b0Skamil // For now, have LLVMFuzzerTestOneInput just to make it link.
26*a7c257b0Skamil // Later we may want to make unittests that actually call LLVMFuzzerTestOneInput.
LLVMFuzzerTestOneInput(const uint8_t * Data,size_t Size)27*a7c257b0Skamil extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
28*a7c257b0Skamil   abort();
29*a7c257b0Skamil }
30*a7c257b0Skamil 
TEST(Fuzzer,Basename)31*a7c257b0Skamil TEST(Fuzzer, Basename) {
32*a7c257b0Skamil   EXPECT_EQ(Basename("foo/bar"), "bar");
33*a7c257b0Skamil   EXPECT_EQ(Basename("bar"), "bar");
34*a7c257b0Skamil   EXPECT_EQ(Basename("/bar"), "bar");
35*a7c257b0Skamil   EXPECT_EQ(Basename("foo/x"), "x");
36*a7c257b0Skamil   EXPECT_EQ(Basename("foo/"), "");
37*a7c257b0Skamil #if LIBFUZZER_WINDOWS
38*a7c257b0Skamil   EXPECT_EQ(Basename("foo\\bar"), "bar");
39*a7c257b0Skamil   EXPECT_EQ(Basename("foo\\bar/baz"), "baz");
40*a7c257b0Skamil   EXPECT_EQ(Basename("\\bar"), "bar");
41*a7c257b0Skamil   EXPECT_EQ(Basename("foo\\x"), "x");
42*a7c257b0Skamil   EXPECT_EQ(Basename("foo\\"), "");
43*a7c257b0Skamil #endif
44*a7c257b0Skamil }
45*a7c257b0Skamil 
TEST(Fuzzer,CrossOver)46*a7c257b0Skamil TEST(Fuzzer, CrossOver) {
47*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
48*a7c257b0Skamil   fuzzer::EF = t.get();
49*a7c257b0Skamil   Random Rand(0);
50*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
51*a7c257b0Skamil   Unit A({0, 1, 2}), B({5, 6, 7});
52*a7c257b0Skamil   Unit C;
53*a7c257b0Skamil   Unit Expected[] = {
54*a7c257b0Skamil        { 0 },
55*a7c257b0Skamil        { 0, 1 },
56*a7c257b0Skamil        { 0, 5 },
57*a7c257b0Skamil        { 0, 1, 2 },
58*a7c257b0Skamil        { 0, 1, 5 },
59*a7c257b0Skamil        { 0, 5, 1 },
60*a7c257b0Skamil        { 0, 5, 6 },
61*a7c257b0Skamil        { 0, 1, 2, 5 },
62*a7c257b0Skamil        { 0, 1, 5, 2 },
63*a7c257b0Skamil        { 0, 1, 5, 6 },
64*a7c257b0Skamil        { 0, 5, 1, 2 },
65*a7c257b0Skamil        { 0, 5, 1, 6 },
66*a7c257b0Skamil        { 0, 5, 6, 1 },
67*a7c257b0Skamil        { 0, 5, 6, 7 },
68*a7c257b0Skamil        { 0, 1, 2, 5, 6 },
69*a7c257b0Skamil        { 0, 1, 5, 2, 6 },
70*a7c257b0Skamil        { 0, 1, 5, 6, 2 },
71*a7c257b0Skamil        { 0, 1, 5, 6, 7 },
72*a7c257b0Skamil        { 0, 5, 1, 2, 6 },
73*a7c257b0Skamil        { 0, 5, 1, 6, 2 },
74*a7c257b0Skamil        { 0, 5, 1, 6, 7 },
75*a7c257b0Skamil        { 0, 5, 6, 1, 2 },
76*a7c257b0Skamil        { 0, 5, 6, 1, 7 },
77*a7c257b0Skamil        { 0, 5, 6, 7, 1 },
78*a7c257b0Skamil        { 0, 1, 2, 5, 6, 7 },
79*a7c257b0Skamil        { 0, 1, 5, 2, 6, 7 },
80*a7c257b0Skamil        { 0, 1, 5, 6, 2, 7 },
81*a7c257b0Skamil        { 0, 1, 5, 6, 7, 2 },
82*a7c257b0Skamil        { 0, 5, 1, 2, 6, 7 },
83*a7c257b0Skamil        { 0, 5, 1, 6, 2, 7 },
84*a7c257b0Skamil        { 0, 5, 1, 6, 7, 2 },
85*a7c257b0Skamil        { 0, 5, 6, 1, 2, 7 },
86*a7c257b0Skamil        { 0, 5, 6, 1, 7, 2 },
87*a7c257b0Skamil        { 0, 5, 6, 7, 1, 2 }
88*a7c257b0Skamil   };
89*a7c257b0Skamil   for (size_t Len = 1; Len < 8; Len++) {
90*a7c257b0Skamil     Set<Unit> FoundUnits, ExpectedUnitsWitThisLength;
91*a7c257b0Skamil     for (int Iter = 0; Iter < 3000; Iter++) {
92*a7c257b0Skamil       C.resize(Len);
93*a7c257b0Skamil       size_t NewSize = MD->CrossOver(A.data(), A.size(), B.data(), B.size(),
94*a7c257b0Skamil                                      C.data(), C.size());
95*a7c257b0Skamil       C.resize(NewSize);
96*a7c257b0Skamil       FoundUnits.insert(C);
97*a7c257b0Skamil     }
98*a7c257b0Skamil     for (const Unit &U : Expected)
99*a7c257b0Skamil       if (U.size() <= Len)
100*a7c257b0Skamil         ExpectedUnitsWitThisLength.insert(U);
101*a7c257b0Skamil     EXPECT_EQ(ExpectedUnitsWitThisLength, FoundUnits);
102*a7c257b0Skamil   }
103*a7c257b0Skamil }
104*a7c257b0Skamil 
TEST(Fuzzer,Hash)105*a7c257b0Skamil TEST(Fuzzer, Hash) {
106*a7c257b0Skamil   uint8_t A[] = {'a', 'b', 'c'};
107*a7c257b0Skamil   fuzzer::Unit U(A, A + sizeof(A));
108*a7c257b0Skamil   EXPECT_EQ("a9993e364706816aba3e25717850c26c9cd0d89d", fuzzer::Hash(U));
109*a7c257b0Skamil   U.push_back('d');
110*a7c257b0Skamil   EXPECT_EQ("81fe8bfe87576c3ecb22426f8e57847382917acf", fuzzer::Hash(U));
111*a7c257b0Skamil }
112*a7c257b0Skamil 
113*a7c257b0Skamil typedef size_t (MutationDispatcher::*Mutator)(uint8_t *Data, size_t Size,
114*a7c257b0Skamil                                               size_t MaxSize);
115*a7c257b0Skamil 
TestEraseBytes(Mutator M,int NumIter)116*a7c257b0Skamil void TestEraseBytes(Mutator M, int NumIter) {
117*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
118*a7c257b0Skamil   fuzzer::EF = t.get();
119*a7c257b0Skamil   uint8_t REM0[8] = {0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
120*a7c257b0Skamil   uint8_t REM1[8] = {0x00, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
121*a7c257b0Skamil   uint8_t REM2[8] = {0x00, 0x11, 0x33, 0x44, 0x55, 0x66, 0x77};
122*a7c257b0Skamil   uint8_t REM3[8] = {0x00, 0x11, 0x22, 0x44, 0x55, 0x66, 0x77};
123*a7c257b0Skamil   uint8_t REM4[8] = {0x00, 0x11, 0x22, 0x33, 0x55, 0x66, 0x77};
124*a7c257b0Skamil   uint8_t REM5[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x66, 0x77};
125*a7c257b0Skamil   uint8_t REM6[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x77};
126*a7c257b0Skamil   uint8_t REM7[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
127*a7c257b0Skamil 
128*a7c257b0Skamil   uint8_t REM8[6] = {0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
129*a7c257b0Skamil   uint8_t REM9[6] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55};
130*a7c257b0Skamil   uint8_t REM10[6] = {0x00, 0x11, 0x22, 0x55, 0x66, 0x77};
131*a7c257b0Skamil 
132*a7c257b0Skamil   uint8_t REM11[5] = {0x33, 0x44, 0x55, 0x66, 0x77};
133*a7c257b0Skamil   uint8_t REM12[5] = {0x00, 0x11, 0x22, 0x33, 0x44};
134*a7c257b0Skamil   uint8_t REM13[5] = {0x00, 0x44, 0x55, 0x66, 0x77};
135*a7c257b0Skamil 
136*a7c257b0Skamil 
137*a7c257b0Skamil   Random Rand(0);
138*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
139*a7c257b0Skamil   int FoundMask = 0;
140*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
141*a7c257b0Skamil     uint8_t T[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
142*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, sizeof(T), sizeof(T));
143*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM0, T, 7)) FoundMask |= 1 << 0;
144*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM1, T, 7)) FoundMask |= 1 << 1;
145*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM2, T, 7)) FoundMask |= 1 << 2;
146*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM3, T, 7)) FoundMask |= 1 << 3;
147*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM4, T, 7)) FoundMask |= 1 << 4;
148*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM5, T, 7)) FoundMask |= 1 << 5;
149*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM6, T, 7)) FoundMask |= 1 << 6;
150*a7c257b0Skamil     if (NewSize == 7 && !memcmp(REM7, T, 7)) FoundMask |= 1 << 7;
151*a7c257b0Skamil 
152*a7c257b0Skamil     if (NewSize == 6 && !memcmp(REM8, T, 6)) FoundMask |= 1 << 8;
153*a7c257b0Skamil     if (NewSize == 6 && !memcmp(REM9, T, 6)) FoundMask |= 1 << 9;
154*a7c257b0Skamil     if (NewSize == 6 && !memcmp(REM10, T, 6)) FoundMask |= 1 << 10;
155*a7c257b0Skamil 
156*a7c257b0Skamil     if (NewSize == 5 && !memcmp(REM11, T, 5)) FoundMask |= 1 << 11;
157*a7c257b0Skamil     if (NewSize == 5 && !memcmp(REM12, T, 5)) FoundMask |= 1 << 12;
158*a7c257b0Skamil     if (NewSize == 5 && !memcmp(REM13, T, 5)) FoundMask |= 1 << 13;
159*a7c257b0Skamil   }
160*a7c257b0Skamil   EXPECT_EQ(FoundMask, (1 << 14) - 1);
161*a7c257b0Skamil }
162*a7c257b0Skamil 
TEST(FuzzerMutate,EraseBytes1)163*a7c257b0Skamil TEST(FuzzerMutate, EraseBytes1) {
164*a7c257b0Skamil   TestEraseBytes(&MutationDispatcher::Mutate_EraseBytes, 200);
165*a7c257b0Skamil }
TEST(FuzzerMutate,EraseBytes2)166*a7c257b0Skamil TEST(FuzzerMutate, EraseBytes2) {
167*a7c257b0Skamil   TestEraseBytes(&MutationDispatcher::Mutate, 2000);
168*a7c257b0Skamil }
169*a7c257b0Skamil 
TestInsertByte(Mutator M,int NumIter)170*a7c257b0Skamil void TestInsertByte(Mutator M, int NumIter) {
171*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
172*a7c257b0Skamil   fuzzer::EF = t.get();
173*a7c257b0Skamil   Random Rand(0);
174*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
175*a7c257b0Skamil   int FoundMask = 0;
176*a7c257b0Skamil   uint8_t INS0[8] = {0xF1, 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
177*a7c257b0Skamil   uint8_t INS1[8] = {0x00, 0xF2, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
178*a7c257b0Skamil   uint8_t INS2[8] = {0x00, 0x11, 0xF3, 0x22, 0x33, 0x44, 0x55, 0x66};
179*a7c257b0Skamil   uint8_t INS3[8] = {0x00, 0x11, 0x22, 0xF4, 0x33, 0x44, 0x55, 0x66};
180*a7c257b0Skamil   uint8_t INS4[8] = {0x00, 0x11, 0x22, 0x33, 0xF5, 0x44, 0x55, 0x66};
181*a7c257b0Skamil   uint8_t INS5[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0xF6, 0x55, 0x66};
182*a7c257b0Skamil   uint8_t INS6[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0xF7, 0x66};
183*a7c257b0Skamil   uint8_t INS7[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0xF8};
184*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
185*a7c257b0Skamil     uint8_t T[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
186*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 7, 8);
187*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS0, T, 8)) FoundMask |= 1 << 0;
188*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS1, T, 8)) FoundMask |= 1 << 1;
189*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS2, T, 8)) FoundMask |= 1 << 2;
190*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS3, T, 8)) FoundMask |= 1 << 3;
191*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS4, T, 8)) FoundMask |= 1 << 4;
192*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS5, T, 8)) FoundMask |= 1 << 5;
193*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS6, T, 8)) FoundMask |= 1 << 6;
194*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS7, T, 8)) FoundMask |= 1 << 7;
195*a7c257b0Skamil   }
196*a7c257b0Skamil   EXPECT_EQ(FoundMask, 255);
197*a7c257b0Skamil }
198*a7c257b0Skamil 
TEST(FuzzerMutate,InsertByte1)199*a7c257b0Skamil TEST(FuzzerMutate, InsertByte1) {
200*a7c257b0Skamil   TestInsertByte(&MutationDispatcher::Mutate_InsertByte, 1 << 15);
201*a7c257b0Skamil }
TEST(FuzzerMutate,InsertByte2)202*a7c257b0Skamil TEST(FuzzerMutate, InsertByte2) {
203*a7c257b0Skamil   TestInsertByte(&MutationDispatcher::Mutate, 1 << 17);
204*a7c257b0Skamil }
205*a7c257b0Skamil 
TestInsertRepeatedBytes(Mutator M,int NumIter)206*a7c257b0Skamil void TestInsertRepeatedBytes(Mutator M, int NumIter) {
207*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
208*a7c257b0Skamil   fuzzer::EF = t.get();
209*a7c257b0Skamil   Random Rand(0);
210*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
211*a7c257b0Skamil   int FoundMask = 0;
212*a7c257b0Skamil   uint8_t INS0[7] = {0x00, 0x11, 0x22, 0x33, 'a', 'a', 'a'};
213*a7c257b0Skamil   uint8_t INS1[7] = {0x00, 0x11, 0x22, 'a', 'a', 'a', 0x33};
214*a7c257b0Skamil   uint8_t INS2[7] = {0x00, 0x11, 'a', 'a', 'a', 0x22, 0x33};
215*a7c257b0Skamil   uint8_t INS3[7] = {0x00, 'a', 'a', 'a', 0x11, 0x22, 0x33};
216*a7c257b0Skamil   uint8_t INS4[7] = {'a', 'a', 'a', 0x00, 0x11, 0x22, 0x33};
217*a7c257b0Skamil 
218*a7c257b0Skamil   uint8_t INS5[8] = {0x00, 0x11, 0x22, 0x33, 'b', 'b', 'b', 'b'};
219*a7c257b0Skamil   uint8_t INS6[8] = {0x00, 0x11, 0x22, 'b', 'b', 'b', 'b', 0x33};
220*a7c257b0Skamil   uint8_t INS7[8] = {0x00, 0x11, 'b', 'b', 'b', 'b', 0x22, 0x33};
221*a7c257b0Skamil   uint8_t INS8[8] = {0x00, 'b', 'b', 'b', 'b', 0x11, 0x22, 0x33};
222*a7c257b0Skamil   uint8_t INS9[8] = {'b', 'b', 'b', 'b', 0x00, 0x11, 0x22, 0x33};
223*a7c257b0Skamil 
224*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
225*a7c257b0Skamil     uint8_t T[8] = {0x00, 0x11, 0x22, 0x33};
226*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 4, 8);
227*a7c257b0Skamil     if (NewSize == 7 && !memcmp(INS0, T, 7)) FoundMask |= 1 << 0;
228*a7c257b0Skamil     if (NewSize == 7 && !memcmp(INS1, T, 7)) FoundMask |= 1 << 1;
229*a7c257b0Skamil     if (NewSize == 7 && !memcmp(INS2, T, 7)) FoundMask |= 1 << 2;
230*a7c257b0Skamil     if (NewSize == 7 && !memcmp(INS3, T, 7)) FoundMask |= 1 << 3;
231*a7c257b0Skamil     if (NewSize == 7 && !memcmp(INS4, T, 7)) FoundMask |= 1 << 4;
232*a7c257b0Skamil 
233*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS5, T, 8)) FoundMask |= 1 << 5;
234*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS6, T, 8)) FoundMask |= 1 << 6;
235*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS7, T, 8)) FoundMask |= 1 << 7;
236*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS8, T, 8)) FoundMask |= 1 << 8;
237*a7c257b0Skamil     if (NewSize == 8 && !memcmp(INS9, T, 8)) FoundMask |= 1 << 9;
238*a7c257b0Skamil 
239*a7c257b0Skamil   }
240*a7c257b0Skamil   EXPECT_EQ(FoundMask, (1 << 10) - 1);
241*a7c257b0Skamil }
242*a7c257b0Skamil 
TEST(FuzzerMutate,InsertRepeatedBytes1)243*a7c257b0Skamil TEST(FuzzerMutate, InsertRepeatedBytes1) {
244*a7c257b0Skamil   TestInsertRepeatedBytes(&MutationDispatcher::Mutate_InsertRepeatedBytes, 10000);
245*a7c257b0Skamil }
TEST(FuzzerMutate,InsertRepeatedBytes2)246*a7c257b0Skamil TEST(FuzzerMutate, InsertRepeatedBytes2) {
247*a7c257b0Skamil   TestInsertRepeatedBytes(&MutationDispatcher::Mutate, 300000);
248*a7c257b0Skamil }
249*a7c257b0Skamil 
TestChangeByte(Mutator M,int NumIter)250*a7c257b0Skamil void TestChangeByte(Mutator M, int NumIter) {
251*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
252*a7c257b0Skamil   fuzzer::EF = t.get();
253*a7c257b0Skamil   Random Rand(0);
254*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
255*a7c257b0Skamil   int FoundMask = 0;
256*a7c257b0Skamil   uint8_t CH0[8] = {0xF0, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
257*a7c257b0Skamil   uint8_t CH1[8] = {0x00, 0xF1, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
258*a7c257b0Skamil   uint8_t CH2[8] = {0x00, 0x11, 0xF2, 0x33, 0x44, 0x55, 0x66, 0x77};
259*a7c257b0Skamil   uint8_t CH3[8] = {0x00, 0x11, 0x22, 0xF3, 0x44, 0x55, 0x66, 0x77};
260*a7c257b0Skamil   uint8_t CH4[8] = {0x00, 0x11, 0x22, 0x33, 0xF4, 0x55, 0x66, 0x77};
261*a7c257b0Skamil   uint8_t CH5[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0xF5, 0x66, 0x77};
262*a7c257b0Skamil   uint8_t CH6[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0xF5, 0x77};
263*a7c257b0Skamil   uint8_t CH7[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0xF7};
264*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
265*a7c257b0Skamil     uint8_t T[9] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
266*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 8, 9);
267*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH0, T, 8)) FoundMask |= 1 << 0;
268*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH1, T, 8)) FoundMask |= 1 << 1;
269*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH2, T, 8)) FoundMask |= 1 << 2;
270*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH3, T, 8)) FoundMask |= 1 << 3;
271*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH4, T, 8)) FoundMask |= 1 << 4;
272*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH5, T, 8)) FoundMask |= 1 << 5;
273*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH6, T, 8)) FoundMask |= 1 << 6;
274*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH7, T, 8)) FoundMask |= 1 << 7;
275*a7c257b0Skamil   }
276*a7c257b0Skamil   EXPECT_EQ(FoundMask, 255);
277*a7c257b0Skamil }
278*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeByte1)279*a7c257b0Skamil TEST(FuzzerMutate, ChangeByte1) {
280*a7c257b0Skamil   TestChangeByte(&MutationDispatcher::Mutate_ChangeByte, 1 << 15);
281*a7c257b0Skamil }
TEST(FuzzerMutate,ChangeByte2)282*a7c257b0Skamil TEST(FuzzerMutate, ChangeByte2) {
283*a7c257b0Skamil   TestChangeByte(&MutationDispatcher::Mutate, 1 << 17);
284*a7c257b0Skamil }
285*a7c257b0Skamil 
TestChangeBit(Mutator M,int NumIter)286*a7c257b0Skamil void TestChangeBit(Mutator M, int NumIter) {
287*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
288*a7c257b0Skamil   fuzzer::EF = t.get();
289*a7c257b0Skamil   Random Rand(0);
290*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
291*a7c257b0Skamil   int FoundMask = 0;
292*a7c257b0Skamil   uint8_t CH0[8] = {0x01, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
293*a7c257b0Skamil   uint8_t CH1[8] = {0x00, 0x13, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
294*a7c257b0Skamil   uint8_t CH2[8] = {0x00, 0x11, 0x02, 0x33, 0x44, 0x55, 0x66, 0x77};
295*a7c257b0Skamil   uint8_t CH3[8] = {0x00, 0x11, 0x22, 0x37, 0x44, 0x55, 0x66, 0x77};
296*a7c257b0Skamil   uint8_t CH4[8] = {0x00, 0x11, 0x22, 0x33, 0x54, 0x55, 0x66, 0x77};
297*a7c257b0Skamil   uint8_t CH5[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x54, 0x66, 0x77};
298*a7c257b0Skamil   uint8_t CH6[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x76, 0x77};
299*a7c257b0Skamil   uint8_t CH7[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0xF7};
300*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
301*a7c257b0Skamil     uint8_t T[9] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
302*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 8, 9);
303*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH0, T, 8)) FoundMask |= 1 << 0;
304*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH1, T, 8)) FoundMask |= 1 << 1;
305*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH2, T, 8)) FoundMask |= 1 << 2;
306*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH3, T, 8)) FoundMask |= 1 << 3;
307*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH4, T, 8)) FoundMask |= 1 << 4;
308*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH5, T, 8)) FoundMask |= 1 << 5;
309*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH6, T, 8)) FoundMask |= 1 << 6;
310*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH7, T, 8)) FoundMask |= 1 << 7;
311*a7c257b0Skamil   }
312*a7c257b0Skamil   EXPECT_EQ(FoundMask, 255);
313*a7c257b0Skamil }
314*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeBit1)315*a7c257b0Skamil TEST(FuzzerMutate, ChangeBit1) {
316*a7c257b0Skamil   TestChangeBit(&MutationDispatcher::Mutate_ChangeBit, 1 << 16);
317*a7c257b0Skamil }
TEST(FuzzerMutate,ChangeBit2)318*a7c257b0Skamil TEST(FuzzerMutate, ChangeBit2) {
319*a7c257b0Skamil   TestChangeBit(&MutationDispatcher::Mutate, 1 << 18);
320*a7c257b0Skamil }
321*a7c257b0Skamil 
TestShuffleBytes(Mutator M,int NumIter)322*a7c257b0Skamil void TestShuffleBytes(Mutator M, int NumIter) {
323*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
324*a7c257b0Skamil   fuzzer::EF = t.get();
325*a7c257b0Skamil   Random Rand(0);
326*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
327*a7c257b0Skamil   int FoundMask = 0;
328*a7c257b0Skamil   uint8_t CH0[7] = {0x00, 0x22, 0x11, 0x33, 0x44, 0x55, 0x66};
329*a7c257b0Skamil   uint8_t CH1[7] = {0x11, 0x00, 0x33, 0x22, 0x44, 0x55, 0x66};
330*a7c257b0Skamil   uint8_t CH2[7] = {0x00, 0x33, 0x11, 0x22, 0x44, 0x55, 0x66};
331*a7c257b0Skamil   uint8_t CH3[7] = {0x00, 0x11, 0x22, 0x44, 0x55, 0x66, 0x33};
332*a7c257b0Skamil   uint8_t CH4[7] = {0x00, 0x11, 0x22, 0x33, 0x55, 0x44, 0x66};
333*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
334*a7c257b0Skamil     uint8_t T[7] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
335*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 7, 7);
336*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH0, T, 7)) FoundMask |= 1 << 0;
337*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH1, T, 7)) FoundMask |= 1 << 1;
338*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH2, T, 7)) FoundMask |= 1 << 2;
339*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH3, T, 7)) FoundMask |= 1 << 3;
340*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH4, T, 7)) FoundMask |= 1 << 4;
341*a7c257b0Skamil   }
342*a7c257b0Skamil   EXPECT_EQ(FoundMask, 31);
343*a7c257b0Skamil }
344*a7c257b0Skamil 
TEST(FuzzerMutate,ShuffleBytes1)345*a7c257b0Skamil TEST(FuzzerMutate, ShuffleBytes1) {
346*a7c257b0Skamil   TestShuffleBytes(&MutationDispatcher::Mutate_ShuffleBytes, 1 << 17);
347*a7c257b0Skamil }
TEST(FuzzerMutate,ShuffleBytes2)348*a7c257b0Skamil TEST(FuzzerMutate, ShuffleBytes2) {
349*a7c257b0Skamil   TestShuffleBytes(&MutationDispatcher::Mutate, 1 << 20);
350*a7c257b0Skamil }
351*a7c257b0Skamil 
TestCopyPart(Mutator M,int NumIter)352*a7c257b0Skamil void TestCopyPart(Mutator M, int NumIter) {
353*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
354*a7c257b0Skamil   fuzzer::EF = t.get();
355*a7c257b0Skamil   Random Rand(0);
356*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
357*a7c257b0Skamil   int FoundMask = 0;
358*a7c257b0Skamil   uint8_t CH0[7] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x00, 0x11};
359*a7c257b0Skamil   uint8_t CH1[7] = {0x55, 0x66, 0x22, 0x33, 0x44, 0x55, 0x66};
360*a7c257b0Skamil   uint8_t CH2[7] = {0x00, 0x55, 0x66, 0x33, 0x44, 0x55, 0x66};
361*a7c257b0Skamil   uint8_t CH3[7] = {0x00, 0x11, 0x22, 0x00, 0x11, 0x22, 0x66};
362*a7c257b0Skamil   uint8_t CH4[7] = {0x00, 0x11, 0x11, 0x22, 0x33, 0x55, 0x66};
363*a7c257b0Skamil 
364*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
365*a7c257b0Skamil     uint8_t T[7] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66};
366*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 7, 7);
367*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH0, T, 7)) FoundMask |= 1 << 0;
368*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH1, T, 7)) FoundMask |= 1 << 1;
369*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH2, T, 7)) FoundMask |= 1 << 2;
370*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH3, T, 7)) FoundMask |= 1 << 3;
371*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH4, T, 7)) FoundMask |= 1 << 4;
372*a7c257b0Skamil   }
373*a7c257b0Skamil 
374*a7c257b0Skamil   uint8_t CH5[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x00, 0x11, 0x22};
375*a7c257b0Skamil   uint8_t CH6[8] = {0x22, 0x33, 0x44, 0x00, 0x11, 0x22, 0x33, 0x44};
376*a7c257b0Skamil   uint8_t CH7[8] = {0x00, 0x11, 0x22, 0x00, 0x11, 0x22, 0x33, 0x44};
377*a7c257b0Skamil   uint8_t CH8[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x22, 0x33, 0x44};
378*a7c257b0Skamil   uint8_t CH9[8] = {0x00, 0x11, 0x22, 0x22, 0x33, 0x44, 0x33, 0x44};
379*a7c257b0Skamil 
380*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
381*a7c257b0Skamil     uint8_t T[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
382*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 5, 8);
383*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH5, T, 8)) FoundMask |= 1 << 5;
384*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH6, T, 8)) FoundMask |= 1 << 6;
385*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH7, T, 8)) FoundMask |= 1 << 7;
386*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH8, T, 8)) FoundMask |= 1 << 8;
387*a7c257b0Skamil     if (NewSize == 8 && !memcmp(CH9, T, 8)) FoundMask |= 1 << 9;
388*a7c257b0Skamil   }
389*a7c257b0Skamil 
390*a7c257b0Skamil   EXPECT_EQ(FoundMask, 1023);
391*a7c257b0Skamil }
392*a7c257b0Skamil 
TEST(FuzzerMutate,CopyPart1)393*a7c257b0Skamil TEST(FuzzerMutate, CopyPart1) {
394*a7c257b0Skamil   TestCopyPart(&MutationDispatcher::Mutate_CopyPart, 1 << 10);
395*a7c257b0Skamil }
TEST(FuzzerMutate,CopyPart2)396*a7c257b0Skamil TEST(FuzzerMutate, CopyPart2) {
397*a7c257b0Skamil   TestCopyPart(&MutationDispatcher::Mutate, 1 << 13);
398*a7c257b0Skamil }
TEST(FuzzerMutate,CopyPartNoInsertAtMaxSize)399*a7c257b0Skamil TEST(FuzzerMutate, CopyPartNoInsertAtMaxSize) {
400*a7c257b0Skamil   // This (non exhaustively) tests if `Mutate_CopyPart` tries to perform an
401*a7c257b0Skamil   // insert on an input of size `MaxSize`.  Performing an insert in this case
402*a7c257b0Skamil   // will lead to the mutation failing.
403*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
404*a7c257b0Skamil   fuzzer::EF = t.get();
405*a7c257b0Skamil   Random Rand(0);
406*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
407*a7c257b0Skamil   uint8_t Data[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x00, 0x11, 0x22};
408*a7c257b0Skamil   size_t MaxSize = sizeof(Data);
409*a7c257b0Skamil   for (int count = 0; count < (1 << 18); ++count) {
410*a7c257b0Skamil     size_t NewSize = MD->Mutate_CopyPart(Data, MaxSize, MaxSize);
411*a7c257b0Skamil     ASSERT_EQ(NewSize, MaxSize);
412*a7c257b0Skamil   }
413*a7c257b0Skamil }
414*a7c257b0Skamil 
TestAddWordFromDictionary(Mutator M,int NumIter)415*a7c257b0Skamil void TestAddWordFromDictionary(Mutator M, int NumIter) {
416*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
417*a7c257b0Skamil   fuzzer::EF = t.get();
418*a7c257b0Skamil   Random Rand(0);
419*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
420*a7c257b0Skamil   uint8_t Word1[4] = {0xAA, 0xBB, 0xCC, 0xDD};
421*a7c257b0Skamil   uint8_t Word2[3] = {0xFF, 0xEE, 0xEF};
422*a7c257b0Skamil   MD->AddWordToManualDictionary(Word(Word1, sizeof(Word1)));
423*a7c257b0Skamil   MD->AddWordToManualDictionary(Word(Word2, sizeof(Word2)));
424*a7c257b0Skamil   int FoundMask = 0;
425*a7c257b0Skamil   uint8_t CH0[7] = {0x00, 0x11, 0x22, 0xAA, 0xBB, 0xCC, 0xDD};
426*a7c257b0Skamil   uint8_t CH1[7] = {0x00, 0x11, 0xAA, 0xBB, 0xCC, 0xDD, 0x22};
427*a7c257b0Skamil   uint8_t CH2[7] = {0x00, 0xAA, 0xBB, 0xCC, 0xDD, 0x11, 0x22};
428*a7c257b0Skamil   uint8_t CH3[7] = {0xAA, 0xBB, 0xCC, 0xDD, 0x00, 0x11, 0x22};
429*a7c257b0Skamil   uint8_t CH4[6] = {0x00, 0x11, 0x22, 0xFF, 0xEE, 0xEF};
430*a7c257b0Skamil   uint8_t CH5[6] = {0x00, 0x11, 0xFF, 0xEE, 0xEF, 0x22};
431*a7c257b0Skamil   uint8_t CH6[6] = {0x00, 0xFF, 0xEE, 0xEF, 0x11, 0x22};
432*a7c257b0Skamil   uint8_t CH7[6] = {0xFF, 0xEE, 0xEF, 0x00, 0x11, 0x22};
433*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
434*a7c257b0Skamil     uint8_t T[7] = {0x00, 0x11, 0x22};
435*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 3, 7);
436*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH0, T, 7)) FoundMask |= 1 << 0;
437*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH1, T, 7)) FoundMask |= 1 << 1;
438*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH2, T, 7)) FoundMask |= 1 << 2;
439*a7c257b0Skamil     if (NewSize == 7 && !memcmp(CH3, T, 7)) FoundMask |= 1 << 3;
440*a7c257b0Skamil     if (NewSize == 6 && !memcmp(CH4, T, 6)) FoundMask |= 1 << 4;
441*a7c257b0Skamil     if (NewSize == 6 && !memcmp(CH5, T, 6)) FoundMask |= 1 << 5;
442*a7c257b0Skamil     if (NewSize == 6 && !memcmp(CH6, T, 6)) FoundMask |= 1 << 6;
443*a7c257b0Skamil     if (NewSize == 6 && !memcmp(CH7, T, 6)) FoundMask |= 1 << 7;
444*a7c257b0Skamil   }
445*a7c257b0Skamil   EXPECT_EQ(FoundMask, 255);
446*a7c257b0Skamil }
447*a7c257b0Skamil 
TEST(FuzzerMutate,AddWordFromDictionary1)448*a7c257b0Skamil TEST(FuzzerMutate, AddWordFromDictionary1) {
449*a7c257b0Skamil   TestAddWordFromDictionary(
450*a7c257b0Skamil       &MutationDispatcher::Mutate_AddWordFromManualDictionary, 1 << 15);
451*a7c257b0Skamil }
452*a7c257b0Skamil 
TEST(FuzzerMutate,AddWordFromDictionary2)453*a7c257b0Skamil TEST(FuzzerMutate, AddWordFromDictionary2) {
454*a7c257b0Skamil   TestAddWordFromDictionary(&MutationDispatcher::Mutate, 1 << 15);
455*a7c257b0Skamil }
456*a7c257b0Skamil 
TestChangeASCIIInteger(Mutator M,int NumIter)457*a7c257b0Skamil void TestChangeASCIIInteger(Mutator M, int NumIter) {
458*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
459*a7c257b0Skamil   fuzzer::EF = t.get();
460*a7c257b0Skamil   Random Rand(0);
461*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
462*a7c257b0Skamil 
463*a7c257b0Skamil   uint8_t CH0[8] = {'1', '2', '3', '4', '5', '6', '7', '7'};
464*a7c257b0Skamil   uint8_t CH1[8] = {'1', '2', '3', '4', '5', '6', '7', '9'};
465*a7c257b0Skamil   uint8_t CH2[8] = {'2', '4', '6', '9', '1', '3', '5', '6'};
466*a7c257b0Skamil   uint8_t CH3[8] = {'0', '6', '1', '7', '2', '8', '3', '9'};
467*a7c257b0Skamil   int FoundMask = 0;
468*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
469*a7c257b0Skamil     uint8_t T[8] = {'1', '2', '3', '4', '5', '6', '7', '8'};
470*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 8, 8);
471*a7c257b0Skamil     /**/ if (NewSize == 8 && !memcmp(CH0, T, 8)) FoundMask |= 1 << 0;
472*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH1, T, 8)) FoundMask |= 1 << 1;
473*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH2, T, 8)) FoundMask |= 1 << 2;
474*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH3, T, 8)) FoundMask |= 1 << 3;
475*a7c257b0Skamil     else if (NewSize == 8)                       FoundMask |= 1 << 4;
476*a7c257b0Skamil   }
477*a7c257b0Skamil   EXPECT_EQ(FoundMask, 31);
478*a7c257b0Skamil }
479*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeASCIIInteger1)480*a7c257b0Skamil TEST(FuzzerMutate, ChangeASCIIInteger1) {
481*a7c257b0Skamil   TestChangeASCIIInteger(&MutationDispatcher::Mutate_ChangeASCIIInteger,
482*a7c257b0Skamil                          1 << 15);
483*a7c257b0Skamil }
484*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeASCIIInteger2)485*a7c257b0Skamil TEST(FuzzerMutate, ChangeASCIIInteger2) {
486*a7c257b0Skamil   TestChangeASCIIInteger(&MutationDispatcher::Mutate, 1 << 15);
487*a7c257b0Skamil }
488*a7c257b0Skamil 
TestChangeBinaryInteger(Mutator M,int NumIter)489*a7c257b0Skamil void TestChangeBinaryInteger(Mutator M, int NumIter) {
490*a7c257b0Skamil   std::unique_ptr<ExternalFunctions> t(new ExternalFunctions());
491*a7c257b0Skamil   fuzzer::EF = t.get();
492*a7c257b0Skamil   Random Rand(0);
493*a7c257b0Skamil   std::unique_ptr<MutationDispatcher> MD(new MutationDispatcher(Rand, {}));
494*a7c257b0Skamil 
495*a7c257b0Skamil   uint8_t CH0[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x79};
496*a7c257b0Skamil   uint8_t CH1[8] = {0x00, 0x11, 0x22, 0x31, 0x44, 0x55, 0x66, 0x77};
497*a7c257b0Skamil   uint8_t CH2[8] = {0xff, 0x10, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
498*a7c257b0Skamil   uint8_t CH3[8] = {0x00, 0x11, 0x2a, 0x33, 0x44, 0x55, 0x66, 0x77};
499*a7c257b0Skamil   uint8_t CH4[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x4f, 0x66, 0x77};
500*a7c257b0Skamil   uint8_t CH5[8] = {0xff, 0xee, 0xdd, 0xcc, 0xbb, 0xaa, 0x99, 0x88};
501*a7c257b0Skamil   uint8_t CH6[8] = {0x00, 0x11, 0x22, 0x00, 0x00, 0x00, 0x08, 0x77}; // Size
502*a7c257b0Skamil   uint8_t CH7[8] = {0x00, 0x08, 0x00, 0x33, 0x44, 0x55, 0x66, 0x77}; // Sw(Size)
503*a7c257b0Skamil 
504*a7c257b0Skamil   int FoundMask = 0;
505*a7c257b0Skamil   for (int i = 0; i < NumIter; i++) {
506*a7c257b0Skamil     uint8_t T[8] = {0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77};
507*a7c257b0Skamil     size_t NewSize = (*MD.*M)(T, 8, 8);
508*a7c257b0Skamil     /**/ if (NewSize == 8 && !memcmp(CH0, T, 8)) FoundMask |= 1 << 0;
509*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH1, T, 8)) FoundMask |= 1 << 1;
510*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH2, T, 8)) FoundMask |= 1 << 2;
511*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH3, T, 8)) FoundMask |= 1 << 3;
512*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH4, T, 8)) FoundMask |= 1 << 4;
513*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH5, T, 8)) FoundMask |= 1 << 5;
514*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH6, T, 8)) FoundMask |= 1 << 6;
515*a7c257b0Skamil     else if (NewSize == 8 && !memcmp(CH7, T, 8)) FoundMask |= 1 << 7;
516*a7c257b0Skamil   }
517*a7c257b0Skamil   EXPECT_EQ(FoundMask, 255);
518*a7c257b0Skamil }
519*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeBinaryInteger1)520*a7c257b0Skamil TEST(FuzzerMutate, ChangeBinaryInteger1) {
521*a7c257b0Skamil   TestChangeBinaryInteger(&MutationDispatcher::Mutate_ChangeBinaryInteger,
522*a7c257b0Skamil                          1 << 12);
523*a7c257b0Skamil }
524*a7c257b0Skamil 
TEST(FuzzerMutate,ChangeBinaryInteger2)525*a7c257b0Skamil TEST(FuzzerMutate, ChangeBinaryInteger2) {
526*a7c257b0Skamil   TestChangeBinaryInteger(&MutationDispatcher::Mutate, 1 << 15);
527*a7c257b0Skamil }
528*a7c257b0Skamil 
529*a7c257b0Skamil 
TEST(FuzzerDictionary,ParseOneDictionaryEntry)530*a7c257b0Skamil TEST(FuzzerDictionary, ParseOneDictionaryEntry) {
531*a7c257b0Skamil   Unit U;
532*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("", &U));
533*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry(" ", &U));
534*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("\t  ", &U));
535*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("  \" ", &U));
536*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("  zz\" ", &U));
537*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("  \"zz ", &U));
538*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("  \"\" ", &U));
539*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"a\"", &U));
540*a7c257b0Skamil   EXPECT_EQ(U, Unit({'a'}));
541*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"abc\"", &U));
542*a7c257b0Skamil   EXPECT_EQ(U, Unit({'a', 'b', 'c'}));
543*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("abc=\"abc\"", &U));
544*a7c257b0Skamil   EXPECT_EQ(U, Unit({'a', 'b', 'c'}));
545*a7c257b0Skamil   EXPECT_FALSE(ParseOneDictionaryEntry("\"\\\"", &U));
546*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"\\\\\"", &U));
547*a7c257b0Skamil   EXPECT_EQ(U, Unit({'\\'}));
548*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"\\xAB\"", &U));
549*a7c257b0Skamil   EXPECT_EQ(U, Unit({0xAB}));
550*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"\\xABz\\xDE\"", &U));
551*a7c257b0Skamil   EXPECT_EQ(U, Unit({0xAB, 'z', 0xDE}));
552*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"#\"", &U));
553*a7c257b0Skamil   EXPECT_EQ(U, Unit({'#'}));
554*a7c257b0Skamil   EXPECT_TRUE(ParseOneDictionaryEntry("\"\\\"\"", &U));
555*a7c257b0Skamil   EXPECT_EQ(U, Unit({'"'}));
556*a7c257b0Skamil }
557*a7c257b0Skamil 
TEST(FuzzerDictionary,ParseDictionaryFile)558*a7c257b0Skamil TEST(FuzzerDictionary, ParseDictionaryFile) {
559*a7c257b0Skamil   Vector<Unit> Units;
560*a7c257b0Skamil   EXPECT_FALSE(ParseDictionaryFile("zzz\n", &Units));
561*a7c257b0Skamil   EXPECT_FALSE(ParseDictionaryFile("", &Units));
562*a7c257b0Skamil   EXPECT_TRUE(ParseDictionaryFile("\n", &Units));
563*a7c257b0Skamil   EXPECT_EQ(Units.size(), 0U);
564*a7c257b0Skamil   EXPECT_TRUE(ParseDictionaryFile("#zzzz a b c d\n", &Units));
565*a7c257b0Skamil   EXPECT_EQ(Units.size(), 0U);
566*a7c257b0Skamil   EXPECT_TRUE(ParseDictionaryFile(" #zzzz\n", &Units));
567*a7c257b0Skamil   EXPECT_EQ(Units.size(), 0U);
568*a7c257b0Skamil   EXPECT_TRUE(ParseDictionaryFile("  #zzzz\n", &Units));
569*a7c257b0Skamil   EXPECT_EQ(Units.size(), 0U);
570*a7c257b0Skamil   EXPECT_TRUE(ParseDictionaryFile("  #zzzz\naaa=\"aa\"", &Units));
571*a7c257b0Skamil   EXPECT_EQ(Units, Vector<Unit>({Unit({'a', 'a'})}));
572*a7c257b0Skamil   EXPECT_TRUE(
573*a7c257b0Skamil       ParseDictionaryFile("  #zzzz\naaa=\"aa\"\n\nabc=\"abc\"", &Units));
574*a7c257b0Skamil   EXPECT_EQ(Units,
575*a7c257b0Skamil             Vector<Unit>({Unit({'a', 'a'}), Unit({'a', 'b', 'c'})}));
576*a7c257b0Skamil }
577*a7c257b0Skamil 
TEST(FuzzerUtil,Base64)578*a7c257b0Skamil TEST(FuzzerUtil, Base64) {
579*a7c257b0Skamil   EXPECT_EQ("", Base64({}));
580*a7c257b0Skamil   EXPECT_EQ("YQ==", Base64({'a'}));
581*a7c257b0Skamil   EXPECT_EQ("eA==", Base64({'x'}));
582*a7c257b0Skamil   EXPECT_EQ("YWI=", Base64({'a', 'b'}));
583*a7c257b0Skamil   EXPECT_EQ("eHk=", Base64({'x', 'y'}));
584*a7c257b0Skamil   EXPECT_EQ("YWJj", Base64({'a', 'b', 'c'}));
585*a7c257b0Skamil   EXPECT_EQ("eHl6", Base64({'x', 'y', 'z'}));
586*a7c257b0Skamil   EXPECT_EQ("YWJjeA==", Base64({'a', 'b', 'c', 'x'}));
587*a7c257b0Skamil   EXPECT_EQ("YWJjeHk=", Base64({'a', 'b', 'c', 'x', 'y'}));
588*a7c257b0Skamil   EXPECT_EQ("YWJjeHl6", Base64({'a', 'b', 'c', 'x', 'y', 'z'}));
589*a7c257b0Skamil }
590*a7c257b0Skamil 
TEST(Corpus,Distribution)591*a7c257b0Skamil TEST(Corpus, Distribution) {
592*a7c257b0Skamil   DataFlowTrace DFT;
593*a7c257b0Skamil   Random Rand(0);
594*a7c257b0Skamil   std::unique_ptr<InputCorpus> C(new InputCorpus(""));
595*a7c257b0Skamil   size_t N = 10;
596*a7c257b0Skamil   size_t TriesPerUnit = 1<<16;
597*a7c257b0Skamil   for (size_t i = 0; i < N; i++)
598*a7c257b0Skamil     C->AddToCorpus(Unit{static_cast<uint8_t>(i)}, 1, false, false, {}, DFT,
599*a7c257b0Skamil                    nullptr);
600*a7c257b0Skamil 
601*a7c257b0Skamil   Vector<size_t> Hist(N);
602*a7c257b0Skamil   for (size_t i = 0; i < N * TriesPerUnit; i++) {
603*a7c257b0Skamil     Hist[C->ChooseUnitIdxToMutate(Rand)]++;
604*a7c257b0Skamil   }
605*a7c257b0Skamil   for (size_t i = 0; i < N; i++) {
606*a7c257b0Skamil     // A weak sanity check that every unit gets invoked.
607*a7c257b0Skamil     EXPECT_GT(Hist[i], TriesPerUnit / N / 3);
608*a7c257b0Skamil   }
609*a7c257b0Skamil }
610*a7c257b0Skamil 
TEST(Merge,Bad)611*a7c257b0Skamil TEST(Merge, Bad) {
612*a7c257b0Skamil   const char *kInvalidInputs[] = {
613*a7c257b0Skamil     "",
614*a7c257b0Skamil     "x",
615*a7c257b0Skamil     "3\nx",
616*a7c257b0Skamil     "2\n3",
617*a7c257b0Skamil     "2\n2",
618*a7c257b0Skamil     "2\n2\nA\n",
619*a7c257b0Skamil     "2\n2\nA\nB\nC\n",
620*a7c257b0Skamil     "0\n0\n",
621*a7c257b0Skamil     "1\n1\nA\nDONE 0",
622*a7c257b0Skamil     "1\n1\nA\nSTARTED 1",
623*a7c257b0Skamil   };
624*a7c257b0Skamil   Merger M;
625*a7c257b0Skamil   for (auto S : kInvalidInputs) {
626*a7c257b0Skamil     // fprintf(stderr, "TESTING:\n%s\n", S);
627*a7c257b0Skamil     EXPECT_FALSE(M.Parse(S, false));
628*a7c257b0Skamil   }
629*a7c257b0Skamil }
630*a7c257b0Skamil 
EQ(const Vector<uint32_t> & A,const Vector<uint32_t> & B)631*a7c257b0Skamil void EQ(const Vector<uint32_t> &A, const Vector<uint32_t> &B) {
632*a7c257b0Skamil   EXPECT_EQ(A, B);
633*a7c257b0Skamil }
634*a7c257b0Skamil 
EQ(const Vector<std::string> & A,const Vector<std::string> & B)635*a7c257b0Skamil void EQ(const Vector<std::string> &A, const Vector<std::string> &B) {
636*a7c257b0Skamil   Set<std::string> a(A.begin(), A.end());
637*a7c257b0Skamil   Set<std::string> b(B.begin(), B.end());
638*a7c257b0Skamil   EXPECT_EQ(a, b);
639*a7c257b0Skamil }
640*a7c257b0Skamil 
Merge(const std::string & Input,const Vector<std::string> Result,size_t NumNewFeatures)641*a7c257b0Skamil static void Merge(const std::string &Input,
642*a7c257b0Skamil                   const Vector<std::string> Result,
643*a7c257b0Skamil                   size_t NumNewFeatures) {
644*a7c257b0Skamil   Merger M;
645*a7c257b0Skamil   Vector<std::string> NewFiles;
646*a7c257b0Skamil   EXPECT_TRUE(M.Parse(Input, true));
647*a7c257b0Skamil   std::stringstream SS;
648*a7c257b0Skamil   M.PrintSummary(SS);
649*a7c257b0Skamil   EXPECT_EQ(NumNewFeatures, M.Merge(&NewFiles));
650*a7c257b0Skamil   EXPECT_EQ(M.AllFeatures(), M.ParseSummary(SS));
651*a7c257b0Skamil   EQ(NewFiles, Result);
652*a7c257b0Skamil }
653*a7c257b0Skamil 
TEST(Merge,Good)654*a7c257b0Skamil TEST(Merge, Good) {
655*a7c257b0Skamil   Merger M;
656*a7c257b0Skamil 
657*a7c257b0Skamil   EXPECT_TRUE(M.Parse("1\n0\nAA\n", false));
658*a7c257b0Skamil   EXPECT_EQ(M.Files.size(), 1U);
659*a7c257b0Skamil   EXPECT_EQ(M.NumFilesInFirstCorpus, 0U);
660*a7c257b0Skamil   EXPECT_EQ(M.Files[0].Name, "AA");
661*a7c257b0Skamil   EXPECT_TRUE(M.LastFailure.empty());
662*a7c257b0Skamil   EXPECT_EQ(M.FirstNotProcessedFile, 0U);
663*a7c257b0Skamil 
664*a7c257b0Skamil   EXPECT_TRUE(M.Parse("2\n1\nAA\nBB\nSTARTED 0 42\n", false));
665*a7c257b0Skamil   EXPECT_EQ(M.Files.size(), 2U);
666*a7c257b0Skamil   EXPECT_EQ(M.NumFilesInFirstCorpus, 1U);
667*a7c257b0Skamil   EXPECT_EQ(M.Files[0].Name, "AA");
668*a7c257b0Skamil   EXPECT_EQ(M.Files[1].Name, "BB");
669*a7c257b0Skamil   EXPECT_EQ(M.LastFailure, "AA");
670*a7c257b0Skamil   EXPECT_EQ(M.FirstNotProcessedFile, 1U);
671*a7c257b0Skamil 
672*a7c257b0Skamil   EXPECT_TRUE(M.Parse("3\n1\nAA\nBB\nC\n"
673*a7c257b0Skamil                         "STARTED 0 1000\n"
674*a7c257b0Skamil                         "DONE 0 1 2 3\n"
675*a7c257b0Skamil                         "STARTED 1 1001\n"
676*a7c257b0Skamil                         "DONE 1 4 5 6 \n"
677*a7c257b0Skamil                         "STARTED 2 1002\n"
678*a7c257b0Skamil                         "", true));
679*a7c257b0Skamil   EXPECT_EQ(M.Files.size(), 3U);
680*a7c257b0Skamil   EXPECT_EQ(M.NumFilesInFirstCorpus, 1U);
681*a7c257b0Skamil   EXPECT_EQ(M.Files[0].Name, "AA");
682*a7c257b0Skamil   EXPECT_EQ(M.Files[0].Size, 1000U);
683*a7c257b0Skamil   EXPECT_EQ(M.Files[1].Name, "BB");
684*a7c257b0Skamil   EXPECT_EQ(M.Files[1].Size, 1001U);
685*a7c257b0Skamil   EXPECT_EQ(M.Files[2].Name, "C");
686*a7c257b0Skamil   EXPECT_EQ(M.Files[2].Size, 1002U);
687*a7c257b0Skamil   EXPECT_EQ(M.LastFailure, "C");
688*a7c257b0Skamil   EXPECT_EQ(M.FirstNotProcessedFile, 3U);
689*a7c257b0Skamil   EQ(M.Files[0].Features, {1, 2, 3});
690*a7c257b0Skamil   EQ(M.Files[1].Features, {4, 5, 6});
691*a7c257b0Skamil 
692*a7c257b0Skamil 
693*a7c257b0Skamil   Vector<std::string> NewFiles;
694*a7c257b0Skamil 
695*a7c257b0Skamil   EXPECT_TRUE(M.Parse("3\n2\nAA\nBB\nC\n"
696*a7c257b0Skamil                         "STARTED 0 1000\nDONE 0 1 2 3\n"
697*a7c257b0Skamil                         "STARTED 1 1001\nDONE 1 4 5 6 \n"
698*a7c257b0Skamil                         "STARTED 2 1002\nDONE 2 6 1 3 \n"
699*a7c257b0Skamil                         "", true));
700*a7c257b0Skamil   EXPECT_EQ(M.Files.size(), 3U);
701*a7c257b0Skamil   EXPECT_EQ(M.NumFilesInFirstCorpus, 2U);
702*a7c257b0Skamil   EXPECT_TRUE(M.LastFailure.empty());
703*a7c257b0Skamil   EXPECT_EQ(M.FirstNotProcessedFile, 3U);
704*a7c257b0Skamil   EQ(M.Files[0].Features, {1, 2, 3});
705*a7c257b0Skamil   EQ(M.Files[1].Features, {4, 5, 6});
706*a7c257b0Skamil   EQ(M.Files[2].Features, {1, 3, 6});
707*a7c257b0Skamil   EXPECT_EQ(0U, M.Merge(&NewFiles));
708*a7c257b0Skamil   EQ(NewFiles, {});
709*a7c257b0Skamil 
710*a7c257b0Skamil   EXPECT_TRUE(M.Parse("3\n1\nA\nB\nC\n"
711*a7c257b0Skamil                         "STARTED 0 1000\nDONE 0 1 2 3\n"
712*a7c257b0Skamil                         "STARTED 1 1001\nDONE 1 4 5 6 \n"
713*a7c257b0Skamil                         "STARTED 2 1002\nDONE 2 6 1 3\n"
714*a7c257b0Skamil                         "", true));
715*a7c257b0Skamil   EQ(M.Files[0].Features, {1, 2, 3});
716*a7c257b0Skamil   EQ(M.Files[1].Features, {4, 5, 6});
717*a7c257b0Skamil   EQ(M.Files[2].Features, {1, 3, 6});
718*a7c257b0Skamil   EXPECT_EQ(3U, M.Merge(&NewFiles));
719*a7c257b0Skamil   EQ(NewFiles, {"B"});
720*a7c257b0Skamil 
721*a7c257b0Skamil   // Same as the above, but with InitialFeatures.
722*a7c257b0Skamil   EXPECT_TRUE(M.Parse("2\n0\nB\nC\n"
723*a7c257b0Skamil                         "STARTED 0 1001\nDONE 0 4 5 6 \n"
724*a7c257b0Skamil                         "STARTED 1 1002\nDONE 1 6 1 3\n"
725*a7c257b0Skamil                         "", true));
726*a7c257b0Skamil   EQ(M.Files[0].Features, {4, 5, 6});
727*a7c257b0Skamil   EQ(M.Files[1].Features, {1, 3, 6});
728*a7c257b0Skamil   Set<uint32_t> InitialFeatures;
729*a7c257b0Skamil   InitialFeatures.insert(1);
730*a7c257b0Skamil   InitialFeatures.insert(2);
731*a7c257b0Skamil   InitialFeatures.insert(3);
732*a7c257b0Skamil   EXPECT_EQ(3U, M.Merge(InitialFeatures, &NewFiles));
733*a7c257b0Skamil   EQ(NewFiles, {"B"});
734*a7c257b0Skamil }
735*a7c257b0Skamil 
TEST(Merge,Merge)736*a7c257b0Skamil TEST(Merge, Merge) {
737*a7c257b0Skamil 
738*a7c257b0Skamil   Merge("3\n1\nA\nB\nC\n"
739*a7c257b0Skamil         "STARTED 0 1000\nDONE 0 1 2 3\n"
740*a7c257b0Skamil         "STARTED 1 1001\nDONE 1 4 5 6 \n"
741*a7c257b0Skamil         "STARTED 2 1002\nDONE 2 6 1 3 \n",
742*a7c257b0Skamil         {"B"}, 3);
743*a7c257b0Skamil 
744*a7c257b0Skamil   Merge("3\n0\nA\nB\nC\n"
745*a7c257b0Skamil         "STARTED 0 2000\nDONE 0 1 2 3\n"
746*a7c257b0Skamil         "STARTED 1 1001\nDONE 1 4 5 6 \n"
747*a7c257b0Skamil         "STARTED 2 1002\nDONE 2 6 1 3 \n",
748*a7c257b0Skamil         {"A", "B", "C"}, 6);
749*a7c257b0Skamil 
750*a7c257b0Skamil   Merge("4\n0\nA\nB\nC\nD\n"
751*a7c257b0Skamil         "STARTED 0 2000\nDONE 0 1 2 3\n"
752*a7c257b0Skamil         "STARTED 1 1101\nDONE 1 4 5 6 \n"
753*a7c257b0Skamil         "STARTED 2 1102\nDONE 2 6 1 3 100 \n"
754*a7c257b0Skamil         "STARTED 3 1000\nDONE 3 1  \n",
755*a7c257b0Skamil         {"A", "B", "C", "D"}, 7);
756*a7c257b0Skamil 
757*a7c257b0Skamil   Merge("4\n1\nA\nB\nC\nD\n"
758*a7c257b0Skamil         "STARTED 0 2000\nDONE 0 4 5 6 7 8\n"
759*a7c257b0Skamil         "STARTED 1 1100\nDONE 1 1 2 3 \n"
760*a7c257b0Skamil         "STARTED 2 1100\nDONE 2 2 3 \n"
761*a7c257b0Skamil         "STARTED 3 1000\nDONE 3 1  \n",
762*a7c257b0Skamil         {"B", "D"}, 3);
763*a7c257b0Skamil }
764*a7c257b0Skamil 
TEST(Fuzzer,ForEachNonZeroByte)765*a7c257b0Skamil TEST(Fuzzer, ForEachNonZeroByte) {
766*a7c257b0Skamil   const size_t N = 64;
767*a7c257b0Skamil   alignas(64) uint8_t Ar[N + 8] = {
768*a7c257b0Skamil     0, 0, 0, 0, 0, 0, 0, 0,
769*a7c257b0Skamil     1, 2, 0, 0, 0, 0, 0, 0,
770*a7c257b0Skamil     0, 0, 3, 0, 4, 0, 0, 0,
771*a7c257b0Skamil     0, 0, 0, 0, 0, 0, 0, 0,
772*a7c257b0Skamil     0, 0, 0, 5, 0, 6, 0, 0,
773*a7c257b0Skamil     0, 0, 0, 0, 0, 0, 7, 0,
774*a7c257b0Skamil     0, 0, 0, 0, 0, 0, 0, 0,
775*a7c257b0Skamil     0, 0, 0, 0, 0, 0, 0, 8,
776*a7c257b0Skamil     9, 9, 9, 9, 9, 9, 9, 9,
777*a7c257b0Skamil   };
778*a7c257b0Skamil   typedef Vector<std::pair<size_t, uint8_t> > Vec;
779*a7c257b0Skamil   Vec Res, Expected;
780*a7c257b0Skamil   auto CB = [&](size_t FirstFeature, size_t Idx, uint8_t V) {
781*a7c257b0Skamil     Res.push_back({FirstFeature + Idx, V});
782*a7c257b0Skamil   };
783*a7c257b0Skamil   ForEachNonZeroByte(Ar, Ar + N, 100, CB);
784*a7c257b0Skamil   Expected = {{108, 1}, {109, 2}, {118, 3}, {120, 4},
785*a7c257b0Skamil               {135, 5}, {137, 6}, {146, 7}, {163, 8}};
786*a7c257b0Skamil   EXPECT_EQ(Res, Expected);
787*a7c257b0Skamil 
788*a7c257b0Skamil   Res.clear();
789*a7c257b0Skamil   ForEachNonZeroByte(Ar + 9, Ar + N, 109, CB);
790*a7c257b0Skamil   Expected = {          {109, 2}, {118, 3}, {120, 4},
791*a7c257b0Skamil               {135, 5}, {137, 6}, {146, 7}, {163, 8}};
792*a7c257b0Skamil   EXPECT_EQ(Res, Expected);
793*a7c257b0Skamil 
794*a7c257b0Skamil   Res.clear();
795*a7c257b0Skamil   ForEachNonZeroByte(Ar + 9, Ar + N - 9, 109, CB);
796*a7c257b0Skamil   Expected = {          {109, 2}, {118, 3}, {120, 4},
797*a7c257b0Skamil               {135, 5}, {137, 6}, {146, 7}};
798*a7c257b0Skamil   EXPECT_EQ(Res, Expected);
799*a7c257b0Skamil }
800*a7c257b0Skamil 
801*a7c257b0Skamil // FuzzerCommand unit tests. The arguments in the two helper methods below must
802*a7c257b0Skamil // match.
makeCommandArgs(Vector<std::string> * ArgsToAdd)803*a7c257b0Skamil static void makeCommandArgs(Vector<std::string> *ArgsToAdd) {
804*a7c257b0Skamil   assert(ArgsToAdd);
805*a7c257b0Skamil   ArgsToAdd->clear();
806*a7c257b0Skamil   ArgsToAdd->push_back("foo");
807*a7c257b0Skamil   ArgsToAdd->push_back("-bar=baz");
808*a7c257b0Skamil   ArgsToAdd->push_back("qux");
809*a7c257b0Skamil   ArgsToAdd->push_back(Command::ignoreRemainingArgs());
810*a7c257b0Skamil   ArgsToAdd->push_back("quux");
811*a7c257b0Skamil   ArgsToAdd->push_back("-grault=garply");
812*a7c257b0Skamil }
813*a7c257b0Skamil 
makeCmdLine(const char * separator,const char * suffix)814*a7c257b0Skamil static std::string makeCmdLine(const char *separator, const char *suffix) {
815*a7c257b0Skamil   std::string CmdLine("foo -bar=baz qux ");
816*a7c257b0Skamil   if (strlen(separator) != 0) {
817*a7c257b0Skamil     CmdLine += separator;
818*a7c257b0Skamil     CmdLine += " ";
819*a7c257b0Skamil   }
820*a7c257b0Skamil   CmdLine += Command::ignoreRemainingArgs();
821*a7c257b0Skamil   CmdLine += " quux -grault=garply";
822*a7c257b0Skamil   if (strlen(suffix) != 0) {
823*a7c257b0Skamil     CmdLine += " ";
824*a7c257b0Skamil     CmdLine += suffix;
825*a7c257b0Skamil   }
826*a7c257b0Skamil   return CmdLine;
827*a7c257b0Skamil }
828*a7c257b0Skamil 
TEST(FuzzerCommand,Create)829*a7c257b0Skamil TEST(FuzzerCommand, Create) {
830*a7c257b0Skamil   std::string CmdLine;
831*a7c257b0Skamil 
832*a7c257b0Skamil   // Default constructor
833*a7c257b0Skamil   Command DefaultCmd;
834*a7c257b0Skamil 
835*a7c257b0Skamil   CmdLine = DefaultCmd.toString();
836*a7c257b0Skamil   EXPECT_EQ(CmdLine, "");
837*a7c257b0Skamil 
838*a7c257b0Skamil   // Explicit constructor
839*a7c257b0Skamil   Vector<std::string> ArgsToAdd;
840*a7c257b0Skamil   makeCommandArgs(&ArgsToAdd);
841*a7c257b0Skamil   Command InitializedCmd(ArgsToAdd);
842*a7c257b0Skamil 
843*a7c257b0Skamil   CmdLine = InitializedCmd.toString();
844*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
845*a7c257b0Skamil 
846*a7c257b0Skamil   // Compare each argument
847*a7c257b0Skamil   auto InitializedArgs = InitializedCmd.getArguments();
848*a7c257b0Skamil   auto i = ArgsToAdd.begin();
849*a7c257b0Skamil   auto j = InitializedArgs.begin();
850*a7c257b0Skamil   while (i != ArgsToAdd.end() && j != InitializedArgs.end()) {
851*a7c257b0Skamil     EXPECT_EQ(*i++, *j++);
852*a7c257b0Skamil   }
853*a7c257b0Skamil   EXPECT_EQ(i, ArgsToAdd.end());
854*a7c257b0Skamil   EXPECT_EQ(j, InitializedArgs.end());
855*a7c257b0Skamil 
856*a7c257b0Skamil   // Copy constructor
857*a7c257b0Skamil   Command CopiedCmd(InitializedCmd);
858*a7c257b0Skamil 
859*a7c257b0Skamil   CmdLine = CopiedCmd.toString();
860*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
861*a7c257b0Skamil 
862*a7c257b0Skamil   // Assignment operator
863*a7c257b0Skamil   Command AssignedCmd;
864*a7c257b0Skamil   AssignedCmd = CopiedCmd;
865*a7c257b0Skamil 
866*a7c257b0Skamil   CmdLine = AssignedCmd.toString();
867*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
868*a7c257b0Skamil }
869*a7c257b0Skamil 
TEST(FuzzerCommand,ModifyArguments)870*a7c257b0Skamil TEST(FuzzerCommand, ModifyArguments) {
871*a7c257b0Skamil   Vector<std::string> ArgsToAdd;
872*a7c257b0Skamil   makeCommandArgs(&ArgsToAdd);
873*a7c257b0Skamil   Command Cmd;
874*a7c257b0Skamil   std::string CmdLine;
875*a7c257b0Skamil 
876*a7c257b0Skamil   Cmd.addArguments(ArgsToAdd);
877*a7c257b0Skamil   CmdLine = Cmd.toString();
878*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
879*a7c257b0Skamil 
880*a7c257b0Skamil   Cmd.addArgument("waldo");
881*a7c257b0Skamil   EXPECT_TRUE(Cmd.hasArgument("waldo"));
882*a7c257b0Skamil 
883*a7c257b0Skamil   CmdLine = Cmd.toString();
884*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("waldo", ""));
885*a7c257b0Skamil 
886*a7c257b0Skamil   Cmd.removeArgument("waldo");
887*a7c257b0Skamil   EXPECT_FALSE(Cmd.hasArgument("waldo"));
888*a7c257b0Skamil 
889*a7c257b0Skamil   CmdLine = Cmd.toString();
890*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
891*a7c257b0Skamil }
892*a7c257b0Skamil 
TEST(FuzzerCommand,ModifyFlags)893*a7c257b0Skamil TEST(FuzzerCommand, ModifyFlags) {
894*a7c257b0Skamil   Vector<std::string> ArgsToAdd;
895*a7c257b0Skamil   makeCommandArgs(&ArgsToAdd);
896*a7c257b0Skamil   Command Cmd(ArgsToAdd);
897*a7c257b0Skamil   std::string Value, CmdLine;
898*a7c257b0Skamil   ASSERT_FALSE(Cmd.hasFlag("fred"));
899*a7c257b0Skamil 
900*a7c257b0Skamil   Value = Cmd.getFlagValue("fred");
901*a7c257b0Skamil   EXPECT_EQ(Value, "");
902*a7c257b0Skamil 
903*a7c257b0Skamil   CmdLine = Cmd.toString();
904*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
905*a7c257b0Skamil 
906*a7c257b0Skamil   Cmd.addFlag("fred", "plugh");
907*a7c257b0Skamil   EXPECT_TRUE(Cmd.hasFlag("fred"));
908*a7c257b0Skamil 
909*a7c257b0Skamil   Value = Cmd.getFlagValue("fred");
910*a7c257b0Skamil   EXPECT_EQ(Value, "plugh");
911*a7c257b0Skamil 
912*a7c257b0Skamil   CmdLine = Cmd.toString();
913*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("-fred=plugh", ""));
914*a7c257b0Skamil 
915*a7c257b0Skamil   Cmd.removeFlag("fred");
916*a7c257b0Skamil   EXPECT_FALSE(Cmd.hasFlag("fred"));
917*a7c257b0Skamil 
918*a7c257b0Skamil   Value = Cmd.getFlagValue("fred");
919*a7c257b0Skamil   EXPECT_EQ(Value, "");
920*a7c257b0Skamil 
921*a7c257b0Skamil   CmdLine = Cmd.toString();
922*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ""));
923*a7c257b0Skamil }
924*a7c257b0Skamil 
TEST(FuzzerCommand,SetOutput)925*a7c257b0Skamil TEST(FuzzerCommand, SetOutput) {
926*a7c257b0Skamil   Vector<std::string> ArgsToAdd;
927*a7c257b0Skamil   makeCommandArgs(&ArgsToAdd);
928*a7c257b0Skamil   Command Cmd(ArgsToAdd);
929*a7c257b0Skamil   std::string CmdLine;
930*a7c257b0Skamil   ASSERT_FALSE(Cmd.hasOutputFile());
931*a7c257b0Skamil   ASSERT_FALSE(Cmd.isOutAndErrCombined());
932*a7c257b0Skamil 
933*a7c257b0Skamil   Cmd.combineOutAndErr(true);
934*a7c257b0Skamil   EXPECT_TRUE(Cmd.isOutAndErrCombined());
935*a7c257b0Skamil 
936*a7c257b0Skamil   CmdLine = Cmd.toString();
937*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", "2>&1"));
938*a7c257b0Skamil 
939*a7c257b0Skamil   Cmd.combineOutAndErr(false);
940*a7c257b0Skamil   EXPECT_FALSE(Cmd.isOutAndErrCombined());
941*a7c257b0Skamil 
942*a7c257b0Skamil   Cmd.setOutputFile("xyzzy");
943*a7c257b0Skamil   EXPECT_TRUE(Cmd.hasOutputFile());
944*a7c257b0Skamil 
945*a7c257b0Skamil   CmdLine = Cmd.toString();
946*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ">xyzzy"));
947*a7c257b0Skamil 
948*a7c257b0Skamil   Cmd.setOutputFile("thud");
949*a7c257b0Skamil   EXPECT_TRUE(Cmd.hasOutputFile());
950*a7c257b0Skamil 
951*a7c257b0Skamil   CmdLine = Cmd.toString();
952*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ">thud"));
953*a7c257b0Skamil 
954*a7c257b0Skamil   Cmd.combineOutAndErr();
955*a7c257b0Skamil   EXPECT_TRUE(Cmd.isOutAndErrCombined());
956*a7c257b0Skamil 
957*a7c257b0Skamil   CmdLine = Cmd.toString();
958*a7c257b0Skamil   EXPECT_EQ(CmdLine, makeCmdLine("", ">thud 2>&1"));
959*a7c257b0Skamil }
960*a7c257b0Skamil 
main(int argc,char ** argv)961*a7c257b0Skamil int main(int argc, char **argv) {
962*a7c257b0Skamil   testing::InitGoogleTest(&argc, argv);
963*a7c257b0Skamil   return RUN_ALL_TESTS();
964*a7c257b0Skamil }
965