canfuzz 0.2.0

A coverage-guided fuzzing framework for Internet Computer canisters, built on `libafl` and `pocket-ic`
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

use crate::libafl::feedbacks::{Feedback, StateInitializer};
use crate::libafl::state::HasExecutions;
use crate::libafl::{Error, HasNamedMetadata};
use crate::libafl::{executors::ExitKind, observers::value::RefCellValueObserver};
use serde::Deserialize;
use serde::Serialize;
use std::borrow::Cow;
use std::cell::RefCell;

use crate::libafl_bolts::Named;
use crate::libafl_bolts::tuples::MatchNameRef;
use crate::libafl_bolts::tuples::{Handle, MatchName};

// Struct to store the fuzzing output
#[derive(Debug, Copy, Clone, Serialize, Deserialize)]
pub struct DecodeMap {
    pub previous_ratio: u64,
    pub increased: bool,
}

// Store
pub static mut MAP: RefCell<DecodeMap> = RefCell::new(DecodeMap {
    previous_ratio: 0u64,
    increased: false,
});

// Observer
pub type DecodingMapObserver<'a> = RefCellValueObserver<'a, DecodeMap>;
pub const DECODING_MAP_OBSERVER_NAME: &str = "DecodingMapObserver";

// Feedback
#[derive(Serialize, Clone, Debug)]
pub struct DecodingMapFeedback<'a> {
    handle: Handle<DecodingMapObserver<'a>>,
}

impl DecodingMapFeedback<'_> {
    #[must_use]
    pub fn new() -> Self {
        Self {
            // Handled leaks lifetime of RefCellObserver
            handle: Handle::new(Cow::Borrowed(DECODING_MAP_OBSERVER_NAME)),
        }
    }
}

impl Default for DecodingMapFeedback<'_> {
    fn default() -> Self {
        Self::new()
    }
}

impl Named for DecodingMapFeedback<'_> {
    #[inline]
    fn name(&self) -> &Cow<'static, str> {
        self.handle.name()
    }
}

impl<S> StateInitializer<S> for DecodingMapFeedback<'_> {
    fn init_state(&mut self, _state: &mut S) -> Result<(), Error> {
        Ok(())
    }
}

impl<EM, I, OT, S> Feedback<EM, I, OT, S> for DecodingMapFeedback<'_>
where
    S: HasNamedMetadata + HasExecutions,
    OT: MatchName,
{
    #[allow(clippy::wrong_self_convention)]
    fn is_interesting(
        &mut self,
        _state: &mut S,
        _manager: &mut EM,
        _input: &I,
        observers: &OT,
        _exit_kind: &ExitKind,
    ) -> Result<bool, Error> {
        let observer: &DecodingMapObserver = observers.get(&self.handle).unwrap();
        Ok(observer.get_ref().increased)
    }

    fn append_metadata(
        &mut self,
        _state: &mut S,
        _manager: &mut EM,
        _observers: &OT,
        _testcase: &mut crate::libafl::corpus::Testcase<I>,
    ) -> Result<(), Error> {
        Ok(())
    }
}