| //===- FuzzerInterface.h - Interface header for the Fuzzer ------*- C++ -* ===// | |
| // | |
| // The LLVM Compiler Infrastructure | |
| // | |
| // This file is distributed under the University of Illinois Open Source | |
| // License. See LICENSE.TXT for details. | |
| // | |
| //===----------------------------------------------------------------------===// | |
| // Define the interface between libFuzzer and the library being tested. | |
| //===----------------------------------------------------------------------===// | |
| // NOTE: the libFuzzer interface is thin and in the majority of cases | |
| // you should not include this file into your target. In 95% of cases | |
| // all you need is to define the following function in your file: | |
| // extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size); | |
| // WARNING: keep the interface in C. | |
| extern "C" { | |
| // Mandatory user-provided target function. | |
| // Executes the code under test with [Data, Data+Size) as the input. | |
| // libFuzzer will invoke this function *many* times with different inputs. | |
| // Must return 0. | |
| int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size); | |
| // Optional user-provided initialization function. | |
| // If provided, this function will be called by libFuzzer once at startup. | |
| // It may read and modify argc/argv. | |
| // Must return 0. | |
| int LLVMFuzzerInitialize(int *argc, char ***argv); | |
| // Optional user-provided custom mutator. | |
| // Mutates raw data in [Data, Data+Size) inplace. | |
| // Returns the new size, which is not greater than MaxSize. | |
| // Given the same Seed produces the same mutation. | |
| size_t LLVMFuzzerCustomMutator(uint8_t *Data, size_t Size, size_t MaxSize, | |
| unsigned int Seed); | |
| // Optional user-provided custom cross-over function. | |
| // Combines pieces of Data1 & Data2 together into Out. | |
| // Returns the new size, which is not greater than MaxOutSize. | |
| // Should produce the same mutation given the same Seed. | |
| size_t LLVMFuzzerCustomCrossOver(const uint8_t *Data1, size_t Size1, | |
| const uint8_t *Data2, size_t Size2, | |
| uint8_t *Out, size_t MaxOutSize, | |
| unsigned int Seed); | |
| // Experimental, may go away in future. | |
| // libFuzzer-provided function to be used inside LLVMFuzzerTestOneInput. | |
| // Mutates raw data in [Data, Data+Size) inplace. | |
| // Returns the new size, which is not greater than MaxSize. | |
| size_t LLVMFuzzerMutate(uint8_t *Data, size_t Size, size_t MaxSize); | |
| } // extern "C" | |