| OLD | NEW |
| (Empty) | |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. |
| 4 |
| 5 #include <string> |
| 6 |
| 7 #include "base/basictypes.h" |
| 8 #include "base/strings/string_util.h" |
| 9 #include "tools/ipc_fuzzer/mutate/generator.h" |
| 10 #include "tools/ipc_fuzzer/mutate/rand_util.h" |
| 11 |
| 12 namespace ipc_fuzzer { |
| 13 |
| 14 template <typename T> |
| 15 void GenerateIntegralType(T* value) { |
| 16 switch (RandInRange(16)) { |
| 17 case 0: |
| 18 *value = static_cast<T>(0); |
| 19 break; |
| 20 case 1: |
| 21 *value = static_cast<T>(1); |
| 22 break; |
| 23 case 2: |
| 24 *value = static_cast<T>(-1); |
| 25 break; |
| 26 case 3: |
| 27 *value = static_cast<T>(2); |
| 28 break; |
| 29 default: |
| 30 *value = static_cast<T>(RandU64()); |
| 31 break; |
| 32 } |
| 33 } |
| 34 |
| 35 template <typename T> |
| 36 void GenerateFloatingType(T* value) { |
| 37 *value = RandDouble(); |
| 38 } |
| 39 |
| 40 template <typename T> |
| 41 void GenerateStringType(T* value) { |
| 42 T temp_string; |
| 43 size_t length = RandInRange(300); |
| 44 for (size_t i = 0; i < length; ++i) |
| 45 temp_string += RandInRange(256); |
| 46 *value = temp_string; |
| 47 } |
| 48 |
| 49 void Generator::FuzzBool(bool* value) { |
| 50 *value = RandInRange(2) ? true: false; |
| 51 } |
| 52 |
| 53 void Generator::FuzzInt(int* value) { |
| 54 GenerateIntegralType<int>(value); |
| 55 } |
| 56 |
| 57 void Generator::FuzzLong(long* value) { |
| 58 GenerateIntegralType<long>(value); |
| 59 } |
| 60 |
| 61 void Generator::FuzzSize(size_t* value) { |
| 62 GenerateIntegralType<size_t>(value); |
| 63 } |
| 64 |
| 65 void Generator::FuzzUChar(unsigned char* value) { |
| 66 GenerateIntegralType<unsigned char>(value); |
| 67 } |
| 68 |
| 69 void Generator::FuzzWChar(wchar_t* value) { |
| 70 GenerateIntegralType<wchar_t>(value); |
| 71 } |
| 72 |
| 73 void Generator::FuzzUInt16(uint16* value) { |
| 74 GenerateIntegralType<uint16>(value); |
| 75 } |
| 76 |
| 77 void Generator::FuzzUInt32(uint32* value) { |
| 78 GenerateIntegralType<uint32>(value); |
| 79 } |
| 80 |
| 81 void Generator::FuzzInt64(int64* value) { |
| 82 GenerateIntegralType<int64>(value); |
| 83 } |
| 84 |
| 85 void Generator::FuzzUInt64(uint64* value) { |
| 86 GenerateIntegralType<uint64>(value); |
| 87 } |
| 88 |
| 89 void Generator::FuzzFloat(float* value) { |
| 90 GenerateFloatingType<float>(value); |
| 91 } |
| 92 |
| 93 void Generator::FuzzDouble(double* value) { |
| 94 GenerateFloatingType<double>(value); |
| 95 } |
| 96 |
| 97 void Generator::FuzzString(std::string* value) { |
| 98 GenerateStringType<std::string>(value); |
| 99 } |
| 100 |
| 101 void Generator::FuzzString16(base::string16* value) { |
| 102 GenerateStringType<base::string16>(value); |
| 103 } |
| 104 |
| 105 void Generator::FuzzData(char* data, int length) { |
| 106 for (int i = 0; i < length; ++i) { |
| 107 GenerateIntegralType<char>(&data[i]); |
| 108 } |
| 109 } |
| 110 |
| 111 void Generator::FuzzBytes(void* data, int data_len) { |
| 112 FuzzData(static_cast<char*>(data), data_len); |
| 113 } |
| 114 |
| 115 bool Generator::ShouldGenerate() { |
| 116 // The generator fuzzer should always generate new values. |
| 117 return true; |
| 118 } |
| 119 |
| 120 } // namespace ipc_fuzzer |
| OLD | NEW |