source/fuzz/fuzzer_pass_add_function_calls.h

// Copyright (c) 2020 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

#ifndef SOURCE_FUZZ_FUZZER_PASS_ADD_FUNCTION_CALLS_H_
#define SOURCE_FUZZ_FUZZER_PASS_ADD_FUNCTION_CALLS_H_

#include "source/fuzz/fuzzer_pass.h"

namespace spvtools {
namespace fuzz {

// Fuzzer pass that adds calls at random to (a) livesafe functions, from
// anywhere, and (b) any functions, from dead blocks.
class FuzzerPassAddFunctionCalls : public FuzzerPass {
 public:
  FuzzerPassAddFunctionCalls(
      opt::IRContext* ir_context, TransformationContext* transformation_context,
      FuzzerContext* fuzzer_context,
      protobufs::TransformationSequence* transformations);

  ~FuzzerPassAddFunctionCalls();

  void Apply() override;

 private:
  // Identify all instructions available at |instr_it|, in block |block| of
  // |function|, that are potentially suitable as function call actual
  // parameters.  The results are grouped by type.
  std::map<uint32_t, std::vector<opt::Instruction*>>
  GetAvailableInstructionsSuitableForActualParameters(
      opt::Function* function, opt::BasicBlock* block,
      const opt::BasicBlock::iterator& inst_it);

  // Randomly chooses suitable arguments to invoke |callee| right before
  // instruction |caller_inst_it| of block |caller_block| in |caller_function|,
  // based on both existing available instructions and the addition of new
  // instructions to the module.
  std::vector<uint32_t> ChooseFunctionCallArguments(
      const opt::Function& callee, opt::Function* caller_function,
      opt::BasicBlock* caller_block,
      const opt::BasicBlock::iterator& caller_inst_it);
};

}  // namespace fuzz
}  // namespace spvtools

#endif  // SOURCE_FUZZ_FUZZER_PASS_ADD_FUNCTION_CALLS_H_