OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ | 5 #ifndef TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ |
6 #define TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ | 6 #define TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ |
7 | 7 |
8 #include <stddef.h> | 8 #include <stddef.h> |
9 #include <stdint.h> | 9 #include <stdint.h> |
10 | 10 |
| 11 #include <memory> |
11 #include <string> | 12 #include <string> |
12 #include <vector> | 13 #include <vector> |
13 | 14 |
14 #include "base/strings/string_util.h" | 15 #include "base/strings/string_util.h" |
15 #include "ipc/ipc_message.h" | 16 #include "ipc/ipc_message.h" |
16 | 17 |
17 namespace ipc_fuzzer { | 18 namespace ipc_fuzzer { |
18 | 19 |
19 // Interface implemented by those who generate basic types. The types all | 20 // Interface implemented by those who generate basic types. The types all |
20 // correspond to the types which a pickle from base/pickle.h can pickle, | 21 // correspond to the types which a pickle from base/pickle.h can pickle, |
(...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
60 void FuzzInt64(int64_t* value) override {} | 61 void FuzzInt64(int64_t* value) override {} |
61 void FuzzUInt64(uint64_t* value) override {} | 62 void FuzzUInt64(uint64_t* value) override {} |
62 void FuzzFloat(float* value) override {} | 63 void FuzzFloat(float* value) override {} |
63 void FuzzDouble(double* value) override {} | 64 void FuzzDouble(double* value) override {} |
64 void FuzzString(std::string* value) override {} | 65 void FuzzString(std::string* value) override {} |
65 void FuzzString16(base::string16* value) override {} | 66 void FuzzString16(base::string16* value) override {} |
66 void FuzzData(char* data, int length) override {} | 67 void FuzzData(char* data, int length) override {} |
67 void FuzzBytes(void* data, int data_len) override {} | 68 void FuzzBytes(void* data, int data_len) override {} |
68 }; | 69 }; |
69 | 70 |
70 typedef IPC::Message* (*FuzzerFunction)(IPC::Message*, Fuzzer*); | 71 using FuzzerFunction = std::unique_ptr<IPC::Message> (*)(IPC::Message*, |
| 72 Fuzzer*); |
71 | 73 |
72 // Used for mutating messages. Once populated, the map associates a message ID | 74 // Used for mutating messages. Once populated, the map associates a message ID |
73 // with a FuzzerFunction used for mutation of that message type. | 75 // with a FuzzerFunction used for mutation of that message type. |
74 typedef base::hash_map<uint32_t, FuzzerFunction> FuzzerFunctionMap; | 76 using FuzzerFunctionMap = base::hash_map<uint32_t, FuzzerFunction>; |
75 void PopulateFuzzerFunctionMap(FuzzerFunctionMap* map); | 77 void PopulateFuzzerFunctionMap(FuzzerFunctionMap* map); |
76 | 78 |
77 // Used for generating new messages. Once populated, the vector contains | 79 // Used for generating new messages. Once populated, the vector contains |
78 // FuzzerFunctions for all message types that we know how to generate. | 80 // FuzzerFunctions for all message types that we know how to generate. |
79 typedef std::vector<FuzzerFunction> FuzzerFunctionVector; | 81 using FuzzerFunctionVector = std::vector<FuzzerFunction>; |
80 void PopulateFuzzerFunctionVector(FuzzerFunctionVector* function_vector); | 82 void PopulateFuzzerFunctionVector(FuzzerFunctionVector* function_vector); |
81 | 83 |
82 // Since IPC::Message can be serialized, we also track a global function vector | 84 // Since IPC::Message can be serialized, we also track a global function vector |
83 // to handle generation of new messages while fuzzing. | 85 // to handle generation of new messages while fuzzing. |
84 extern FuzzerFunctionVector g_function_vector; | 86 extern FuzzerFunctionVector g_function_vector; |
85 | 87 |
86 } // namespace ipc_fuzzer | 88 } // namespace ipc_fuzzer |
87 | 89 |
88 #endif // TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ | 90 #endif // TOOLS_IPC_FUZZER_MUTATE_FUZZER_H_ |
OLD | NEW |