c_cpp Protobuf-Mutator实现的原型

Posted 2021-05-14

#define Proto apollo::tools::fuzz::control_message
#define use_binary false 

static void TestOneProtoInput(const apollo::tools::fuzz::control_message& arg);                                          
  using FuzzerProtoType = std::remove_const<std::remove_reference<             
      std::function<decltype(TestOneProtoInput)>::argument_type>::type>::type; 
  extern "C" size_t LLVMFuzzerCustomMutator(                                   
      uint8_t* data, size_t size, size_t max_size, unsigned int seed) {        
    using protobuf_mutator::libfuzzer::CustomProtoMutator;                     
    Proto input;                                                               
    return CustomProtoMutator(use_binary, data, size, max_size, seed, &input); 
 }                
extern "C" size_t LLVMFuzzerCustomCrossOver(                                
      const uint8_t* data1, size_t size1, const uint8_t* data2, size_t size2, 
      uint8_t* out, size_t max_out_size, unsigned int seed) {                 
    using protobuf_mutator::libfuzzer::CustomProtoCrossOver;                  
    Proto input1;                                                             
    Proto input2;                                                             
    return CustomProtoCrossOver(use_binary, data1, size1, data2, size2, out,  
                                max_out_size, seed, &input1, &input2);        
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { 
    using protobuf_mutator::libfuzzer::LoadProtoInput;                      
    Proto input;                                                            
    if (LoadProtoInput(use_binary, data, size, &input))                     
      TestOneProtoInput(input);                                             
    return 0;                                                               
}               
static void TestOneProtoInput(const apollo::tools::fuzz::control_message& message)
{
    apollo::control::control_fuzzer.SetUp();
    if (message.has_planning() &&
      message.planning().header().module_name() == "planning"
      && message.planning().trajectory_point().size() > 0) {
      apollo::control::control_fuzzer.FuzzTarget(
        message.pad(),
        message.localization(),
        message.planning(),
        message.chassis());
    }
}