1 // Copyright (c) 2020 Vasyl Teliman
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 // http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14
15 #include "source/fuzz/fuzzer_pass_permute_function_parameters.h"
16
17 #include <numeric>
18 #include <vector>
19
20 #include "source/fuzz/fuzzer_context.h"
21 #include "source/fuzz/fuzzer_util.h"
22 #include "source/fuzz/instruction_descriptor.h"
23 #include "source/fuzz/transformation_permute_function_parameters.h"
24
25 namespace spvtools {
26 namespace fuzz {
27
FuzzerPassPermuteFunctionParameters(opt::IRContext * ir_context,TransformationContext * transformation_context,FuzzerContext * fuzzer_context,protobufs::TransformationSequence * transformations,bool ignore_inapplicable_transformations)28 FuzzerPassPermuteFunctionParameters::FuzzerPassPermuteFunctionParameters(
29 opt::IRContext* ir_context, TransformationContext* transformation_context,
30 FuzzerContext* fuzzer_context,
31 protobufs::TransformationSequence* transformations,
32 bool ignore_inapplicable_transformations)
33 : FuzzerPass(ir_context, transformation_context, fuzzer_context,
34 transformations, ignore_inapplicable_transformations) {}
35
Apply()36 void FuzzerPassPermuteFunctionParameters::Apply() {
37 for (const auto& function : *GetIRContext()->module()) {
38 uint32_t function_id = function.result_id();
39
40 // Skip the function if it is an entry point
41 if (fuzzerutil::FunctionIsEntryPoint(GetIRContext(), function_id)) {
42 continue;
43 }
44
45 if (!GetFuzzerContext()->ChoosePercentage(
46 GetFuzzerContext()->GetChanceOfPermutingParameters())) {
47 continue;
48 }
49
50 // Compute permutation for parameters
51 auto* function_type =
52 fuzzerutil::GetFunctionType(GetIRContext(), &function);
53 assert(function_type && "Function type is null");
54
55 // Don't take return type into account
56 uint32_t arg_size = function_type->NumInOperands() - 1;
57
58 // Create a vector, fill it with [0, n-1] values and shuffle it
59 std::vector<uint32_t> permutation(arg_size);
60 std::iota(permutation.begin(), permutation.end(), 0);
61 GetFuzzerContext()->Shuffle(&permutation);
62
63 // Apply our transformation
64 ApplyTransformation(TransformationPermuteFunctionParameters(
65 function_id, GetFuzzerContext()->GetFreshId(), permutation));
66 }
67 }
68
69 } // namespace fuzz
70 } // namespace spvtools
71