fuzzer_pass_adjust_function_controls.cpp 3.0 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970
  1. // Copyright (c) 2019 Google LLC
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. #include "source/fuzz/fuzzer_pass_adjust_function_controls.h"
  15. #include "source/fuzz/transformation_set_function_control.h"
  16. namespace spvtools {
  17. namespace fuzz {
  18. FuzzerPassAdjustFunctionControls::FuzzerPassAdjustFunctionControls(
  19. opt::IRContext* ir_context, TransformationContext* transformation_context,
  20. FuzzerContext* fuzzer_context,
  21. protobufs::TransformationSequence* transformations,
  22. bool ignore_inapplicable_transformations)
  23. : FuzzerPass(ir_context, transformation_context, fuzzer_context,
  24. transformations, ignore_inapplicable_transformations) {}
  25. void FuzzerPassAdjustFunctionControls::Apply() {
  26. // Consider every function in the module.
  27. for (auto& function : *GetIRContext()->module()) {
  28. // Randomly decide whether to adjust this function's controls.
  29. if (GetFuzzerContext()->ChoosePercentage(
  30. GetFuzzerContext()->GetChanceOfAdjustingFunctionControl())) {
  31. // Grab the function control mask for the function in its present form.
  32. uint32_t existing_function_control_mask =
  33. function.DefInst().GetSingleWordInOperand(0);
  34. // For the new mask, we first randomly select one of three basic masks:
  35. // None, Inline or DontInline. These are always valid (and are mutually
  36. // exclusive).
  37. std::vector<spv::FunctionControlMask> basic_function_control_masks = {
  38. spv::FunctionControlMask::MaskNone, spv::FunctionControlMask::Inline,
  39. spv::FunctionControlMask::DontInline};
  40. uint32_t new_function_control_mask =
  41. uint32_t(basic_function_control_masks[GetFuzzerContext()->RandomIndex(
  42. basic_function_control_masks)]);
  43. // We now consider the Pure and Const mask bits. If these are already
  44. // set on the function then it's OK to keep them, but also interesting
  45. // to consider dropping them, so we decide randomly in each case.
  46. for (auto mask_bit :
  47. {spv::FunctionControlMask::Pure, spv::FunctionControlMask::Const}) {
  48. if ((existing_function_control_mask & uint32_t(mask_bit)) &&
  49. GetFuzzerContext()->ChooseEven()) {
  50. new_function_control_mask |= uint32_t(mask_bit);
  51. }
  52. }
  53. // Create and add a transformation.
  54. TransformationSetFunctionControl transformation(
  55. function.DefInst().result_id(), new_function_control_mask);
  56. ApplyTransformation(transformation);
  57. }
  58. }
  59. }
  60. } // namespace fuzz
  61. } // namespace spvtools