autarkie 0.3.0

autarkie - instant grammar fuzzing using rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

//! Stage that wraps mutating stages for stats and cleanup
use crate::fuzzer::context::Context;
use crate::Visitor;
use core::{marker::PhantomData, time::Duration};
use libafl::state::HasRand;
use libafl_bolts::current_time;
use libafl_bolts::rands::Rand;
use std::rc::Rc;
use std::{cell::RefCell, num::NonZero};

use libafl::{
    events::EventFirer,
    executors::Executor,
    mutators::{MutationId, MutationResult, Mutator, MutatorsTuple},
    stages::{Restartable, Stage},
    state::HasCurrentTestcase,
    Error, Evaluator, HasMetadata,
};

#[derive(Debug)]
pub struct AutarkieMutationalStage<S, M, I> {
    inner: M,
    stack: usize,
    visitor: Rc<RefCell<Visitor>>,
    phantom: PhantomData<(I, S)>,
}

impl<S, M, I> AutarkieMutationalStage<S, M, I> {
    /// Create a `AutarkieMutationalStage`
    pub fn new(inner: M, stack: usize, visitor: Rc<RefCell<Visitor>>) -> Self {
        Self {
            visitor,
            inner,
            stack,
            phantom: PhantomData,
        }
    }
}

impl<E, EM, M, Z, S, I> Stage<E, EM, S, Z> for AutarkieMutationalStage<S, M, I>
where
    E: Executor<EM, I, S, Z>,
    Z: Evaluator<E, EM, I, S>,
    EM: EventFirer<I, S>,
    S: HasMetadata + HasCurrentTestcase<I> + HasRand,
    M: MutatorsTuple<I, S>,
{
    fn perform(
        &mut self,
        fuzzer: &mut Z,
        executor: &mut E,
        state: &mut S,
        manager: &mut EM,
    ) -> Result<(), Error> {
        let mut current = state.current_input_cloned().unwrap();
        for i in 0..self.stack {
            let idx = state
                .rand_mut()
                .below(unsafe { NonZero::new(self.inner.len()).unwrap_unchecked() })
                .into();
            if self.inner.get_and_mutate(idx, state, &mut current)? == MutationResult::Mutated {
                fuzzer.evaluate_input(state, executor, manager, &current)?;
            }
            let _ = self.visitor.borrow_mut().serialized();
        }
        Ok(())
    }
}

impl<S, M, I> Restartable<S> for AutarkieMutationalStage<S, M, I> {
    fn should_restart(&mut self, state: &mut S) -> Result<bool, Error> {
        Ok(true)
    }

    fn clear_progress(&mut self, state: &mut S) -> Result<(), Error> {
        Ok(())
    }
}