![]() System : Linux absol.cf 5.4.0-198-generic #218-Ubuntu SMP Fri Sep 27 20:18:53 UTC 2024 x86_64 User : www-data ( 33) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /proc/thread-self/root/usr/include/llvm-10/llvm/FuzzMutate/ |
Upload File : |
//===- RandomIRBuilder.h - Utils for randomly mutation IR -------*- C++ -*-===// // // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. // See https://llvm.org/LICENSE.txt for license information. // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception // //===----------------------------------------------------------------------===// // // Provides the Mutator class, which is used to mutate IR for fuzzing. // //===----------------------------------------------------------------------===// #ifndef LLVM_FUZZMUTATE_RANDOMIRBUILDER_H #define LLVM_FUZZMUTATE_RANDOMIRBUILDER_H #include "llvm/ADT/SmallPtrSet.h" #include "llvm/FuzzMutate/IRMutator.h" #include "llvm/FuzzMutate/Random.h" #include <random> namespace llvm { using RandomEngine = std::mt19937; struct RandomIRBuilder { RandomEngine Rand; SmallVector<Type *, 16> KnownTypes; RandomIRBuilder(int Seed, ArrayRef<Type *> AllowedTypes) : Rand(Seed), KnownTypes(AllowedTypes.begin(), AllowedTypes.end()) {} // TODO: Try to make this a bit less of a random mishmash of functions. /// Find a "source" for some operation, which will be used in one of the /// operation's operands. This either selects an instruction in \c Insts or /// returns some new arbitrary Value. Value *findOrCreateSource(BasicBlock &BB, ArrayRef<Instruction *> Insts); /// Find a "source" for some operation, which will be used in one of the /// operation's operands. This either selects an instruction in \c Insts that /// matches \c Pred, or returns some new Value that matches \c Pred. The /// values in \c Srcs should be source operands that have already been /// selected. Value *findOrCreateSource(BasicBlock &BB, ArrayRef<Instruction *> Insts, ArrayRef<Value *> Srcs, fuzzerop::SourcePred Pred); /// Create some Value suitable as a source for some operation. Value *newSource(BasicBlock &BB, ArrayRef<Instruction *> Insts, ArrayRef<Value *> Srcs, fuzzerop::SourcePred Pred); /// Find a viable user for \c V in \c Insts, which should all be contained in /// \c BB. This may also create some new instruction in \c BB and use that. void connectToSink(BasicBlock &BB, ArrayRef<Instruction *> Insts, Value *V); /// Create a user for \c V in \c BB. void newSink(BasicBlock &BB, ArrayRef<Instruction *> Insts, Value *V); Value *findPointer(BasicBlock &BB, ArrayRef<Instruction *> Insts, ArrayRef<Value *> Srcs, fuzzerop::SourcePred Pred); Type *chooseType(LLVMContext &Context, ArrayRef<Value *> Srcs, fuzzerop::SourcePred Pred); }; } // end llvm namespace #endif // LLVM_FUZZMUTATE_RANDOMIRBUILDER_H