ledger-secure-sdk/nano/fuzz__mutator_8h_source.html

#pragma once

#include <stddef.h>

#include <stdint.h>

#include <string.h>

#include "fuzz_defs.h"


extern size_t LLVMFuzzerMutate(uint8_t *data, size_t size, size_t max_size);


size_t fuzz_prefix_size(void);


size_t fuzz_custom_mutator(uint8_t *data, size_t size, size_t max_size, unsigned int seed);


typedef size_t (*fuzz_input_mutator_fn)(uint8_t     *input,

                                        size_t       size,

                                        size_t       max_size,

                                        unsigned int seed);


size_t fuzz_mutate_input_with(uint8_t              *data,

                              size_t                size,

                              size_t                max_size,

                              unsigned int          seed,

                              fuzz_input_mutator_fn mutate_input);

fuzz_defs.h
Shared constants, the input layout, and the command descriptor type for SDK fuzz harnesses.

fuzz_input_mutator_fn
size_t(* fuzz_input_mutator_fn)(uint8_t *input, size_t size, size_t max_size, unsigned int seed)
Mutates a harness input in place, returning its new size.
Definition fuzz_mutator.h:40

fuzz_mutate_input_with
size_t fuzz_mutate_input_with(uint8_t *data, size_t size, size_t max_size, unsigned int seed, fuzz_input_mutator_fn mutate_input)
Run a grammar-aware mutator over the harness input only, leaving the sampled prefix untouched.

fuzz_prefix_size
size_t fuzz_prefix_size(void)
Where Absolution's sampled state ends (see cmake/EmitPrefixSize.cmake).

fuzz_custom_mutator
size_t fuzz_custom_mutator(uint8_t *data, size_t size, size_t max_size, unsigned int seed)
The framework's LLVMFuzzerCustomMutator() body.

LLVMFuzzerMutate
size_t LLVMFuzzerMutate(uint8_t *data, size_t size, size_t max_size)

string.h