2021-02-10 13:05:59 -05:00
|
|
|
// Copyright 2021 The Go Authors. All rights reserved.
|
|
|
|
|
// Use of this source code is governed by a BSD-style
|
|
|
|
|
// license that can be found in the LICENSE file.
|
|
|
|
|
|
|
|
|
|
package fuzz
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"bytes"
|
|
|
|
|
"fmt"
|
|
|
|
|
"go/ast"
|
|
|
|
|
"go/parser"
|
|
|
|
|
"go/token"
|
|
|
|
|
"strconv"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
// encVersion1 will be the first line of a file with version 1 encoding.
|
2021-02-22 13:25:07 -05:00
|
|
|
var encVersion1 = "go test fuzz v1"
|
2021-02-10 13:05:59 -05:00
|
|
|
|
|
|
|
|
// marshalCorpusFile encodes an arbitrary number of arguments into the file format for the
|
|
|
|
|
// corpus.
|
|
|
|
|
func marshalCorpusFile(vals ...interface{}) []byte {
|
|
|
|
|
if len(vals) == 0 {
|
2021-02-18 15:42:05 -05:00
|
|
|
panic("must have at least one value to marshal")
|
2021-02-10 13:05:59 -05:00
|
|
|
}
|
2021-09-10 11:05:29 -04:00
|
|
|
b := bytes.NewBuffer([]byte(encVersion1 + "\n"))
|
2021-02-10 13:05:59 -05:00
|
|
|
// TODO(katiehockman): keep uint8 and int32 encoding where applicable,
|
|
|
|
|
// instead of changing to byte and rune respectively.
|
|
|
|
|
for _, val := range vals {
|
|
|
|
|
switch t := val.(type) {
|
2021-02-18 15:42:05 -05:00
|
|
|
case int, int8, int16, int64, uint, uint16, uint32, uint64, float32, float64, bool:
|
2021-09-10 11:05:29 -04:00
|
|
|
fmt.Fprintf(b, "%T(%v)\n", t, t)
|
2021-02-10 13:05:59 -05:00
|
|
|
case string:
|
2021-09-10 11:05:29 -04:00
|
|
|
fmt.Fprintf(b, "string(%q)\n", t)
|
2021-02-10 13:05:59 -05:00
|
|
|
case rune: // int32
|
2021-09-10 11:05:29 -04:00
|
|
|
fmt.Fprintf(b, "rune(%q)\n", t)
|
2021-02-10 13:05:59 -05:00
|
|
|
case byte: // uint8
|
2021-09-10 11:05:29 -04:00
|
|
|
fmt.Fprintf(b, "byte(%q)\n", t)
|
2021-02-10 13:05:59 -05:00
|
|
|
case []byte: // []uint8
|
2021-09-10 11:05:29 -04:00
|
|
|
fmt.Fprintf(b, "[]byte(%q)\n", t)
|
2021-02-10 13:05:59 -05:00
|
|
|
default:
|
|
|
|
|
panic(fmt.Sprintf("unsupported type: %T", t))
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
return b.Bytes()
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// unmarshalCorpusFile decodes corpus bytes into their respective values.
|
|
|
|
|
func unmarshalCorpusFile(b []byte) ([]interface{}, error) {
|
|
|
|
|
if len(b) == 0 {
|
2021-02-18 15:42:05 -05:00
|
|
|
return nil, fmt.Errorf("cannot unmarshal empty string")
|
2021-02-10 13:05:59 -05:00
|
|
|
}
|
|
|
|
|
lines := bytes.Split(b, []byte("\n"))
|
|
|
|
|
if len(lines) < 2 {
|
|
|
|
|
return nil, fmt.Errorf("must include version and at least one value")
|
|
|
|
|
}
|
|
|
|
|
if string(lines[0]) != encVersion1 {
|
|
|
|
|
return nil, fmt.Errorf("unknown encoding version: %s", lines[0])
|
|
|
|
|
}
|
|
|
|
|
var vals []interface{}
|
|
|
|
|
for _, line := range lines[1:] {
|
|
|
|
|
line = bytes.TrimSpace(line)
|
|
|
|
|
if len(line) == 0 {
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
v, err := parseCorpusValue(line)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, fmt.Errorf("malformed line %q: %v", line, err)
|
|
|
|
|
}
|
|
|
|
|
vals = append(vals, v)
|
|
|
|
|
}
|
|
|
|
|
return vals, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func parseCorpusValue(line []byte) (interface{}, error) {
|
|
|
|
|
fs := token.NewFileSet()
|
|
|
|
|
expr, err := parser.ParseExprFrom(fs, "(test)", line, 0)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
call, ok := expr.(*ast.CallExpr)
|
|
|
|
|
if !ok {
|
|
|
|
|
return nil, fmt.Errorf("expected call expression")
|
|
|
|
|
}
|
|
|
|
|
if len(call.Args) != 1 {
|
|
|
|
|
return nil, fmt.Errorf("expected call expression with 1 argument; got %d", len(call.Args))
|
|
|
|
|
}
|
|
|
|
|
arg := call.Args[0]
|
|
|
|
|
|
|
|
|
|
if arrayType, ok := call.Fun.(*ast.ArrayType); ok {
|
|
|
|
|
if arrayType.Len != nil {
|
|
|
|
|
return nil, fmt.Errorf("expected []byte or primitive type")
|
|
|
|
|
}
|
|
|
|
|
elt, ok := arrayType.Elt.(*ast.Ident)
|
|
|
|
|
if !ok || elt.Name != "byte" {
|
|
|
|
|
return nil, fmt.Errorf("expected []byte")
|
|
|
|
|
}
|
|
|
|
|
lit, ok := arg.(*ast.BasicLit)
|
|
|
|
|
if !ok || lit.Kind != token.STRING {
|
|
|
|
|
return nil, fmt.Errorf("string literal required for type []byte")
|
|
|
|
|
}
|
|
|
|
|
s, err := strconv.Unquote(lit.Value)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
return []byte(s), nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
idType, ok := call.Fun.(*ast.Ident)
|
|
|
|
|
if !ok {
|
|
|
|
|
return nil, fmt.Errorf("expected []byte or primitive type")
|
|
|
|
|
}
|
|
|
|
|
if idType.Name == "bool" {
|
|
|
|
|
id, ok := arg.(*ast.Ident)
|
|
|
|
|
if !ok {
|
|
|
|
|
return nil, fmt.Errorf("malformed bool")
|
|
|
|
|
}
|
|
|
|
|
if id.Name == "true" {
|
|
|
|
|
return true, nil
|
|
|
|
|
} else if id.Name == "false" {
|
|
|
|
|
return false, nil
|
|
|
|
|
} else {
|
|
|
|
|
return nil, fmt.Errorf("true or false required for type bool")
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
var (
|
|
|
|
|
val string
|
|
|
|
|
kind token.Token
|
|
|
|
|
)
|
|
|
|
|
if op, ok := arg.(*ast.UnaryExpr); ok {
|
|
|
|
|
// Special case for negative numbers.
|
|
|
|
|
lit, ok := op.X.(*ast.BasicLit)
|
|
|
|
|
if !ok || (lit.Kind != token.INT && lit.Kind != token.FLOAT) {
|
|
|
|
|
return nil, fmt.Errorf("expected operation on int or float type")
|
|
|
|
|
}
|
|
|
|
|
if op.Op != token.SUB {
|
|
|
|
|
return nil, fmt.Errorf("unsupported operation on int: %v", op.Op)
|
|
|
|
|
}
|
|
|
|
|
val = op.Op.String() + lit.Value // e.g. "-" + "124"
|
|
|
|
|
kind = lit.Kind
|
|
|
|
|
} else {
|
|
|
|
|
lit, ok := arg.(*ast.BasicLit)
|
|
|
|
|
if !ok {
|
|
|
|
|
return nil, fmt.Errorf("literal value required for primitive type")
|
|
|
|
|
}
|
|
|
|
|
val, kind = lit.Value, lit.Kind
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
switch typ := idType.Name; typ {
|
|
|
|
|
case "string":
|
|
|
|
|
if kind != token.STRING {
|
|
|
|
|
return nil, fmt.Errorf("string literal value required for type string")
|
|
|
|
|
}
|
|
|
|
|
return strconv.Unquote(val)
|
|
|
|
|
case "byte", "rune":
|
|
|
|
|
if kind != token.CHAR {
|
|
|
|
|
return nil, fmt.Errorf("character literal required for byte/rune types")
|
|
|
|
|
}
|
|
|
|
|
n := len(val)
|
|
|
|
|
if n < 2 {
|
|
|
|
|
return nil, fmt.Errorf("malformed character literal, missing single quotes")
|
|
|
|
|
}
|
|
|
|
|
code, _, _, err := strconv.UnquoteChar(val[1:n-1], '\'')
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, err
|
|
|
|
|
}
|
|
|
|
|
if typ == "rune" {
|
|
|
|
|
return code, nil
|
|
|
|
|
}
|
|
|
|
|
if code >= 256 {
|
|
|
|
|
return nil, fmt.Errorf("can only encode single byte to a byte type")
|
|
|
|
|
}
|
|
|
|
|
return byte(code), nil
|
|
|
|
|
case "int", "int8", "int16", "int32", "int64":
|
|
|
|
|
if kind != token.INT {
|
|
|
|
|
return nil, fmt.Errorf("integer literal required for int types")
|
|
|
|
|
}
|
|
|
|
|
return parseInt(val, typ)
|
|
|
|
|
case "uint", "uint8", "uint16", "uint32", "uint64":
|
|
|
|
|
if kind != token.INT {
|
|
|
|
|
return nil, fmt.Errorf("integer literal required for uint types")
|
|
|
|
|
}
|
|
|
|
|
return parseUint(val, typ)
|
|
|
|
|
case "float32":
|
2021-04-09 15:50:40 -04:00
|
|
|
if kind != token.FLOAT && kind != token.INT {
|
|
|
|
|
return nil, fmt.Errorf("float or integer literal required for float32 type")
|
2021-02-10 13:05:59 -05:00
|
|
|
}
|
|
|
|
|
v, err := strconv.ParseFloat(val, 32)
|
|
|
|
|
return float32(v), err
|
|
|
|
|
case "float64":
|
2021-04-09 15:50:40 -04:00
|
|
|
if kind != token.FLOAT && kind != token.INT {
|
|
|
|
|
return nil, fmt.Errorf("float or integer literal required for float64 type")
|
2021-02-10 13:05:59 -05:00
|
|
|
}
|
|
|
|
|
return strconv.ParseFloat(val, 64)
|
|
|
|
|
default:
|
|
|
|
|
return nil, fmt.Errorf("expected []byte or primitive type")
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// parseInt returns an integer of value val and type typ.
|
|
|
|
|
func parseInt(val, typ string) (interface{}, error) {
|
|
|
|
|
switch typ {
|
|
|
|
|
case "int":
|
|
|
|
|
return strconv.Atoi(val)
|
|
|
|
|
case "int8":
|
|
|
|
|
i, err := strconv.ParseInt(val, 10, 8)
|
|
|
|
|
return int8(i), err
|
|
|
|
|
case "int16":
|
|
|
|
|
i, err := strconv.ParseInt(val, 10, 16)
|
|
|
|
|
return int16(i), err
|
|
|
|
|
case "int32":
|
|
|
|
|
i, err := strconv.ParseInt(val, 10, 32)
|
|
|
|
|
return int32(i), err
|
|
|
|
|
case "int64":
|
|
|
|
|
return strconv.ParseInt(val, 10, 64)
|
|
|
|
|
default:
|
|
|
|
|
panic("unreachable")
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// parseInt returns an unsigned integer of value val and type typ.
|
|
|
|
|
func parseUint(val, typ string) (interface{}, error) {
|
|
|
|
|
switch typ {
|
|
|
|
|
case "uint":
|
|
|
|
|
i, err := strconv.ParseUint(val, 10, 0)
|
|
|
|
|
return uint(i), err
|
|
|
|
|
case "uint8":
|
|
|
|
|
i, err := strconv.ParseUint(val, 10, 8)
|
|
|
|
|
return uint8(i), err
|
|
|
|
|
case "uint16":
|
|
|
|
|
i, err := strconv.ParseUint(val, 10, 16)
|
|
|
|
|
return uint16(i), err
|
|
|
|
|
case "uint32":
|
|
|
|
|
i, err := strconv.ParseUint(val, 10, 32)
|
|
|
|
|
return uint32(i), err
|
|
|
|
|
case "uint64":
|
|
|
|
|
return strconv.ParseUint(val, 10, 64)
|
|
|
|
|
default:
|
|
|
|
|
panic("unreachable")
|
|
|
|
|
}
|
|
|
|
|
}
|