1ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines//===- FuzzerDriver.cpp - FuzzerDriver function and flags -----------------===// 2ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// 3ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// The LLVM Compiler Infrastructure 4ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// 5ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// This file is distributed under the University of Illinois Open Source 6ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// License. See LICENSE.TXT for details. 7ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// 8ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines//===----------------------------------------------------------------------===// 9ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// FuzzerDriver and flag parsing. 10ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines//===----------------------------------------------------------------------===// 11ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 12ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include "FuzzerInterface.h" 13ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include "FuzzerInternal.h" 14ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 15ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <cstring> 16ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <unistd.h> 17ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <iostream> 18ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <thread> 19ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <atomic> 20ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include <mutex> 212c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#include <string> 222c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#include <sstream> 232c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#include <algorithm> 242c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#include <iterator> 25ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 26ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesnamespace fuzzer { 27ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 28ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// Program arguments. 29ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstruct FlagDescription { 30ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines const char *Name; 31ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines const char *Description; 32ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines int Default; 332c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar int *IntFlag; 342c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar const char **StrFlag; 35ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines}; 36ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 37ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstruct { 382c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#define FUZZER_FLAG_INT(Name, Default, Description) int Name; 392c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#define FUZZER_FLAG_STRING(Name, Description) const char *Name; 40ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include "FuzzerFlags.def" 412c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#undef FUZZER_FLAG_INT 422c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#undef FUZZER_FLAG_STRING 43ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} Flags; 44ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 45ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic FlagDescription FlagDescriptions [] { 462c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#define FUZZER_FLAG_INT(Name, Default, Description) \ 472c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar { #Name, Description, Default, &Flags.Name, nullptr}, 482c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#define FUZZER_FLAG_STRING(Name, Description) \ 492c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar { #Name, Description, 0, nullptr, &Flags.Name }, 50ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines#include "FuzzerFlags.def" 512c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#undef FUZZER_FLAG_INT 522c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar#undef FUZZER_FLAG_STRING 53ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines}; 54ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 55ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic const size_t kNumFlags = 56ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines sizeof(FlagDescriptions) / sizeof(FlagDescriptions[0]); 57ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 58ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic std::vector<std::string> inputs; 59ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic const char *ProgName; 60ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 61ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic void PrintHelp() { 62ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "Usage: " << ProgName 63ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines << " [-flag1=val1 [-flag2=val2 ...] ] [dir1 [dir2 ...] ]\n"; 64ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "\nFlags: (strictly in form -flag=value)\n"; 65ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines size_t MaxFlagLen = 0; 66ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (size_t F = 0; F < kNumFlags; F++) 67ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines MaxFlagLen = std::max(strlen(FlagDescriptions[F].Name), MaxFlagLen); 68ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 69ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (size_t F = 0; F < kNumFlags; F++) { 70ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines const auto &D = FlagDescriptions[F]; 71ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << " " << D.Name; 72ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (size_t i = 0, n = MaxFlagLen - strlen(D.Name); i < n; i++) 73ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << " "; 74ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "\t"; 75ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << D.Default << "\t" << D.Description << "\n"; 76ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 77ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 78ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 79ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic const char *FlagValue(const char *Param, const char *Name) { 80ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines size_t Len = strlen(Name); 81ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Param[0] == '-' && strstr(Param + 1, Name) == Param + 1 && 82ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Param[Len + 1] == '=') 83ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return &Param[Len + 2]; 84ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return nullptr; 85ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 86ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 87ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic bool ParseOneFlag(const char *Param) { 88ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Param[0] != '-') return false; 89ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (size_t F = 0; F < kNumFlags; F++) { 90ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines const char *Name = FlagDescriptions[F].Name; 91ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines const char *Str = FlagValue(Param, Name); 92ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Str) { 932c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (FlagDescriptions[F].IntFlag) { 942c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar int Val = std::stol(Str); 952c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar *FlagDescriptions[F].IntFlag = Val; 962c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (Flags.verbosity >= 2) 972c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cerr << "Flag: " << Name << " " << Val << "\n"; 982c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar return true; 992c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar } else if (FlagDescriptions[F].StrFlag) { 1002c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar *FlagDescriptions[F].StrFlag = Str; 1012c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (Flags.verbosity >= 2) 1022c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cerr << "Flag: " << Name << " " << Str << "\n"; 1032c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar return true; 1042c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar } 105ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 106ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 107ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines PrintHelp(); 108ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines exit(1); 109ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 110ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 111ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines// We don't use any library to minimize dependencies. 112ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic void ParseFlags(int argc, char **argv) { 1132c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar for (size_t F = 0; F < kNumFlags; F++) { 1142c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (FlagDescriptions[F].IntFlag) 1152c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar *FlagDescriptions[F].IntFlag = FlagDescriptions[F].Default; 1162c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (FlagDescriptions[F].StrFlag) 1172c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar *FlagDescriptions[F].StrFlag = nullptr; 1182c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar } 119ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (int A = 1; A < argc; A++) { 120ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (ParseOneFlag(argv[A])) continue; 121ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines inputs.push_back(argv[A]); 122ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 123ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 124ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 125ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic void WorkerThread(const std::string &Cmd, std::atomic<int> *Counter, 126ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines int NumJobs, std::atomic<bool> *HasErrors) { 127ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines static std::mutex CerrMutex; 128ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines while (true) { 129ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines int C = (*Counter)++; 130ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (C >= NumJobs) break; 131ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::string Log = "fuzz-" + std::to_string(C) + ".log"; 132ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::string ToRun = Cmd + " > " + Log + " 2>&1\n"; 133ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.verbosity) 134ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << ToRun; 135ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines int ExitCode = system(ToRun.c_str()); 136ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (ExitCode != 0) 137ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines *HasErrors = true; 138ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::lock_guard<std::mutex> Lock(CerrMutex); 139ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "================== Job " << C 140ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines << " exited with exit code " << ExitCode 141ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines << " =================\n"; 142ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines fuzzer::CopyFileToErr(Log); 143ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 144ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 145ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 146ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesstatic int RunInMultipleProcesses(int argc, char **argv, int NumWorkers, 147ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines int NumJobs) { 148ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::atomic<int> Counter(0); 149ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::atomic<bool> HasErrors(false); 150ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::string Cmd; 151ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (int i = 0; i < argc; i++) { 152ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (FlagValue(argv[i], "jobs") || FlagValue(argv[i], "workers")) continue; 153ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Cmd += argv[i]; 154ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Cmd += " "; 155ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 156ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::vector<std::thread> V; 157ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (int i = 0; i < NumWorkers; i++) 158ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines V.push_back(std::thread(WorkerThread, Cmd, &Counter, NumJobs, &HasErrors)); 159ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (auto &T : V) 160ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines T.join(); 161ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return HasErrors ? 1 : 0; 162ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 163ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 1642c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainarstd::vector<std::string> ReadTokensFile(const char *TokensFilePath) { 1652c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (!TokensFilePath) return {}; 1662c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::string TokensFileContents = FileToString(TokensFilePath); 1672c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::istringstream ISS(TokensFileContents); 1682c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::vector<std::string> Res = {std::istream_iterator<std::string>{ISS}, 1692c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::istream_iterator<std::string>{}}; 1702c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Res.push_back(" "); 1712c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Res.push_back("\t"); 1722c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Res.push_back("\n"); 1732c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar return Res; 1742c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar} 1752c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar 1762c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainarint ApplyTokens(const Fuzzer &F, const char *InputFilePath) { 1772c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Unit U = FileToVector(InputFilePath); 1782c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar auto T = F.SubstituteTokens(U); 1792c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar T.push_back(0); 1802c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cout << T.data(); 1812c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar return 0; 1822c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar} 1832c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar 184ebe69fe11e48d322045d5949c83283927a0d790bStephen Hinesint FuzzerDriver(int argc, char **argv, UserCallback Callback) { 185ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines using namespace fuzzer; 186ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 187ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines ProgName = argv[0]; 188ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines ParseFlags(argc, argv); 189ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.help) { 190ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines PrintHelp(); 191ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return 0; 192ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines } 193ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 194ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.workers > 0 && Flags.jobs > 0) 195ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return RunInMultipleProcesses(argc, argv, Flags.workers, Flags.jobs); 196ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 197ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Fuzzer::FuzzingOptions Options; 198ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.Verbosity = Flags.verbosity; 199ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.MaxLen = Flags.max_len; 200ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.DoCrossOver = Flags.cross_over; 201ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.MutateDepth = Flags.mutate_depth; 202ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.ExitOnFirst = Flags.exit_on_first; 2034c5e43da7792f75567b693105cc53e3f1992ad98Pirama Arumuga Nainar Options.UseCounters = Flags.use_counters; 204ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.UseFullCoverageSet = Flags.use_full_coverage_set; 205ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.UseCoveragePairs = Flags.use_coverage_pairs; 2062c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Options.UseDFSan = Flags.dfsan; 207ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.PreferSmallDuringInitialShuffle = 208ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Flags.prefer_small_during_initial_shuffle; 2092c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar Options.Tokens = ReadTokensFile(Flags.tokens); 210ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.runs >= 0) 211ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.MaxNumberOfRuns = Flags.runs; 212ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (!inputs.empty()) 213ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Options.OutputCorpus = inputs[0]; 214ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines Fuzzer F(Callback, Options); 215ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 216ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines unsigned seed = Flags.seed; 217ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines // Initialize seed. 218ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (seed == 0) 219ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines seed = time(0) * 10000 + getpid(); 220ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.verbosity) 221ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "Seed: " << seed << "\n"; 222ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines srand(seed); 223ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 224ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines // Timer 225ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.timeout > 0) 226ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines SetTimer(Flags.timeout); 227ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 2282c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (Flags.verbosity >= 2) { 2292c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cerr << "Tokens: {"; 2302c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar for (auto &T : Options.Tokens) 2312c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cerr << T << ","; 2322c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar std::cerr << "}\n"; 2332c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar } 2342c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar 2352c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar if (Flags.apply_tokens) 2362c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar return ApplyTokens(F, Flags.apply_tokens); 2372c3e0051c31c3f5b2328b447eadf1cf9c4427442Pirama Arumuga Nainar 238ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines for (auto &inp : inputs) 239ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines F.ReadDir(inp); 240ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 241ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (F.CorpusSize() == 0) 242ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines F.AddToCorpus(Unit()); // Can't fuzz empty corpus, so add an empty input. 243ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines F.ShuffleAndMinimize(); 244ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.save_minimized_corpus) 245ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines F.SaveCorpus(); 246ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines F.Loop(Flags.iterations < 0 ? INT_MAX : Flags.iterations); 247ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines if (Flags.verbosity) 248ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines std::cerr << "Done " << F.getTotalNumberOfRuns() 249ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines << " runs in " << F.secondsSinceProcessStartUp() 250ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines << " seconds\n"; 251ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines return 0; 252ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} 253ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines 254ebe69fe11e48d322045d5949c83283927a0d790bStephen Hines} // namespace fuzzer 255