Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 1 | // Copyright 2016 Google Inc. All rights reserved. |
| 2 | // |
| 3 | // Licensed under the Apache License, Version 2.0 (the "License"); |
| 4 | // you may not use this file except in compliance with the License. |
| 5 | // You may obtain a copy of the License at |
| 6 | // |
| 7 | // http://www.apache.org/licenses/LICENSE-2.0 |
| 8 | // |
| 9 | // Unless required by applicable law or agreed to in writing, software |
| 10 | // distributed under the License is distributed on an "AS IS" BASIS, |
| 11 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 12 | // See the License for the specific language governing permissions and |
| 13 | // limitations under the License. |
| 14 | |
Vitaly Buka | 9dd2f8e | 2017-01-13 00:48:31 -0800 | [diff] [blame] | 15 | #ifndef SRC_PROTOBUF_MUTATOR_H_ |
| 16 | #define SRC_PROTOBUF_MUTATOR_H_ |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 17 | |
Vitaly Buka | 781853c | 2016-11-21 23:09:35 -0800 | [diff] [blame] | 18 | #include <stddef.h> |
| 19 | #include <stdint.h> |
| 20 | |
| 21 | #include <memory> |
Vitaly Buka | 0e17fd7 | 2016-11-18 10:02:46 -0800 | [diff] [blame] | 22 | #include <random> |
Vitaly Buka | f047a00 | 2017-01-12 23:57:00 -0800 | [diff] [blame] | 23 | #include <string> |
Vitaly Buka | 00b6107 | 2016-10-19 16:22:51 -0700 | [diff] [blame] | 24 | |
Vitaly Buka | 35df2e4 | 2017-02-25 01:17:25 -0800 | [diff] [blame] | 25 | #include "port/protobuf.h" |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 26 | |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 27 | namespace protobuf_mutator { |
| 28 | |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 29 | // Randomly makes incremental change in the given protobuf. |
| 30 | // Usage example: |
| 31 | // ProtobufMutator mutator(1); |
| 32 | // MyMessage message; |
| 33 | // message.ParseFromString(encoded_message); |
Vitaly Buka | 4a6d6fc | 2016-12-16 14:21:37 -0800 | [diff] [blame] | 34 | // mutator.Mutate(&message, 10000); |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 35 | // |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 36 | // Class implements very basic mutations of fields. E.g. it just flips bits for |
| 37 | // integers, floats and strings. Also it increases, decreases size of |
| 38 | // strings only by one. For better results users should override |
| 39 | // ProtobufMutator::Mutate* methods with more useful logic, e.g. using library |
| 40 | // like libFuzzer. |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 41 | class ProtobufMutator { |
| 42 | public: |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 43 | using RandomEngine = std::mt19937; |
Vitaly Buka | 781853c | 2016-11-21 23:09:35 -0800 | [diff] [blame] | 44 | |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 45 | // seed: value to initialize random number generator. |
Vitaly Buka | ba12972 | 2016-12-14 17:29:15 -0800 | [diff] [blame] | 46 | explicit ProtobufMutator(uint32_t seed); |
Vitaly Buka | 6c6dbbe | 2017-02-22 13:58:24 -0800 | [diff] [blame] | 47 | virtual ~ProtobufMutator() = default; |
Vitaly Buka | 781853c | 2016-11-21 23:09:35 -0800 | [diff] [blame] | 48 | |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 49 | // message: message to mutate. |
Vitaly Buka | 72019dc | 2016-12-14 19:17:24 -0800 | [diff] [blame] | 50 | // size_increase_hint: approximate number of bytes which can be added to the |
| 51 | // message. Method does not guarantee that real result size increase will be |
| 52 | // less than the value. It only changes probabilities of mutations which can |
| 53 | // cause size increase. Caller could repeat mutation if result was larger than |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 54 | // requested. |
Vitaly Buka | 6c6dbbe | 2017-02-22 13:58:24 -0800 | [diff] [blame] | 55 | void Mutate(protobuf::Message* message, size_t size_increase_hint); |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 56 | |
Vitaly Buka | adfc27c | 2017-02-26 22:36:36 -0800 | [diff] [blame] | 57 | void CrossOver(const protobuf::Message& message1, |
| 58 | protobuf::Message* message2); |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 59 | |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 60 | protected: |
Vitaly Buka | b93a146 | 2017-01-06 17:52:58 -0800 | [diff] [blame] | 61 | // TODO(vitalybuka): Consider to replace with single mutate (uint8_t*, size). |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 62 | virtual int32_t MutateInt32(int32_t value); |
| 63 | virtual int64_t MutateInt64(int64_t value); |
| 64 | virtual uint32_t MutateUInt32(uint32_t value); |
| 65 | virtual uint64_t MutateUInt64(uint64_t value); |
| 66 | virtual float MutateFloat(float value); |
| 67 | virtual double MutateDouble(double value); |
| 68 | virtual bool MutateBool(bool value); |
| 69 | virtual size_t MutateEnum(size_t index, size_t item_count); |
| 70 | virtual std::string MutateString(const std::string& value, |
Vitaly Buka | 5d01320 | 2017-02-24 16:50:11 -0800 | [diff] [blame] | 71 | size_t size_increase_hint); |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 72 | |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 73 | // TODO(vitalybuka): Allow user to control proto level mutations: |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 74 | // * Callbacks to recursive traversal. |
| 75 | // * Callbacks for particular proto level mutations. |
Vitaly Buka | 2cfe02b | 2016-11-18 16:34:09 -0800 | [diff] [blame] | 76 | |
Vitaly Buka | 68e49ad | 2017-02-24 14:24:31 -0800 | [diff] [blame] | 77 | RandomEngine* random() { return &random_; } |
| 78 | |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 79 | private: |
Vitaly Buka | 5d01320 | 2017-02-24 16:50:11 -0800 | [diff] [blame] | 80 | friend class FieldMutator; |
Vitaly Buka | ba12972 | 2016-12-14 17:29:15 -0800 | [diff] [blame] | 81 | friend class TestProtobufMutator; |
Vitaly Buka | 6c6dbbe | 2017-02-22 13:58:24 -0800 | [diff] [blame] | 82 | void InitializeMessage(protobuf::Message* message, size_t max_depth); |
Vitaly Buka | adfc27c | 2017-02-26 22:36:36 -0800 | [diff] [blame] | 83 | void CrossOverImpl(const protobuf::Message& message1, |
| 84 | protobuf::Message* message2); |
Vitaly Buka | 4af611d | 2016-12-03 18:57:32 -0800 | [diff] [blame] | 85 | |
Vitaly Buka | ba12972 | 2016-12-14 17:29:15 -0800 | [diff] [blame] | 86 | bool keep_initialized_ = true; |
Vitaly Buka | 781853c | 2016-11-21 23:09:35 -0800 | [diff] [blame] | 87 | RandomEngine random_; |
Vitaly Buka | b5c12da | 2016-10-19 13:12:41 -0700 | [diff] [blame] | 88 | }; |
| 89 | |
Vitaly Buka | 432b545 | 2016-12-09 14:42:09 -0800 | [diff] [blame] | 90 | } // namespace protobuf_mutator |
| 91 | |
Vitaly Buka | 9dd2f8e | 2017-01-13 00:48:31 -0800 | [diff] [blame] | 92 | #endif // SRC_PROTOBUF_MUTATOR_H_ |