FuzzerCrossOver.cpp 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. //===- FuzzerCrossOver.cpp - Cross over two test inputs -------------------===//
  2. //
  3. // The LLVM Compiler Infrastructure
  4. //
  5. // This file is distributed under the University of Illinois Open Source
  6. // License. See LICENSE.TXT for details.
  7. //
  8. //===----------------------------------------------------------------------===//
  9. // Cross over test inputs.
  10. //===----------------------------------------------------------------------===//
  11. #include <cstring>
  12. #include "FuzzerInternal.h"
  13. namespace fuzzer {
  14. // Cross Data1 and Data2, store the result (up to MaxOutSize bytes) in Out.
  15. size_t CrossOver(const uint8_t *Data1, size_t Size1,
  16. const uint8_t *Data2, size_t Size2,
  17. uint8_t *Out, size_t MaxOutSize) {
  18. assert(Size1 || Size2);
  19. MaxOutSize = rand() % MaxOutSize + 1;
  20. size_t OutPos = 0;
  21. size_t Pos1 = 0;
  22. size_t Pos2 = 0;
  23. size_t *InPos = &Pos1;
  24. size_t InSize = Size1;
  25. const uint8_t *Data = Data1;
  26. bool CurrentlyUsingFirstData = true;
  27. while (OutPos < MaxOutSize && (Pos1 < Size1 || Pos2 < Size2)) {
  28. // Merge a part of Data into Out.
  29. size_t OutSizeLeft = MaxOutSize - OutPos;
  30. if (*InPos < InSize) {
  31. size_t InSizeLeft = InSize - *InPos;
  32. size_t MaxExtraSize = std::min(OutSizeLeft, InSizeLeft);
  33. size_t ExtraSize = rand() % MaxExtraSize + 1;
  34. memcpy(Out + OutPos, Data + *InPos, ExtraSize);
  35. OutPos += ExtraSize;
  36. (*InPos) += ExtraSize;
  37. }
  38. // Use the other input data on the next iteration.
  39. InPos = CurrentlyUsingFirstData ? &Pos2 : &Pos1;
  40. InSize = CurrentlyUsingFirstData ? Size2 : Size1;
  41. Data = CurrentlyUsingFirstData ? Data2 : Data1;
  42. CurrentlyUsingFirstData = !CurrentlyUsingFirstData;
  43. }
  44. return OutPos;
  45. }
  46. } // namespace fuzzer