libafl 0.15.4

Slot your own fuzzers together and extend their features using Rust
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153

//! Generators may generate bytes or, in general, data, for inputs.

use alloc::vec::Vec;
use core::{marker::PhantomData, num::NonZeroUsize};

use libafl_bolts::rands::Rand;

use crate::{Error, inputs::bytes::BytesInput, nonzero, state::HasRand};

pub mod gramatron;
use core::cmp::max;

pub use gramatron::*;

#[cfg(feature = "nautilus")]
pub mod nautilus;
#[cfg(feature = "nautilus")]
pub use nautilus::*;

/// Generators can generate ranges of bytes.
pub trait Generator<I, S> {
    /// Generate a new input
    fn generate(&mut self, state: &mut S) -> Result<I, Error>;
}

/// Iterators may be used as generators.
///
/// `generate` throws a [`Error::Empty`] if an input is requested but
/// [`Iterator::next`] returns `None`.
impl<T, I, S> Generator<I, S> for T
where
    T: Iterator<Item = I>,
{
    fn generate(&mut self, _state: &mut S) -> Result<I, Error> {
        match self.next() {
            Some(i) => Ok(i),
            None => Err(Error::empty(
                "No more items in iterator when generating inputs",
            )),
        }
    }
}

/// An [`Iterator`] built from a [`Generator`].
#[derive(Debug)]
pub struct GeneratorIter<'a, I, S, G> {
    generator: G,
    state: &'a mut S,
    phantom: PhantomData<I>,
}

impl<'a, I, S, G> GeneratorIter<'a, I, S, G> {
    /// Create a new [`GeneratorIter`]
    pub fn new(generator: G, state: &'a mut S) -> Self {
        Self {
            generator,
            state,
            phantom: PhantomData,
        }
    }
}

impl<I, S, G> Iterator for GeneratorIter<'_, I, S, G>
where
    G: Generator<I, S>,
{
    type Item = I;

    fn next(&mut self) -> Option<Self::Item> {
        self.generator.generate(self.state).ok()
    }
}

#[derive(Debug, Clone)]
/// Generates random bytes
pub struct RandBytesGenerator {
    min_size: NonZeroUsize,
    max_size: NonZeroUsize,
}

impl<S> Generator<BytesInput, S> for RandBytesGenerator
where
    S: HasRand,
{
    fn generate(&mut self, state: &mut S) -> Result<BytesInput, Error> {
        let mut size = state
            .rand_mut()
            .between(self.min_size.get(), self.max_size.get());
        size = max(size, 1);
        let random_bytes: Vec<u8> = (0..size)
            .map(|_| state.rand_mut().below(nonzero!(256)) as u8)
            .collect();
        Ok(BytesInput::new(random_bytes))
    }
}

impl RandBytesGenerator {
    /// Returns a new [`RandBytesGenerator`], generating up to `max_size` random bytes.
    #[must_use]
    pub fn new(max_size: NonZeroUsize) -> Self {
        Self {
            min_size: nonzero!(1),
            max_size,
        }
    }

    /// Returns a new [`RandBytesGenerator`], generating from `min_size` up to `max_size` random bytes.
    #[must_use]
    pub fn with_min_size(min_size: NonZeroUsize, max_size: NonZeroUsize) -> Self {
        Self { min_size, max_size }
    }
}

#[derive(Debug, Clone)]
/// Generates random printable characters
pub struct RandPrintablesGenerator {
    min_size: NonZeroUsize,
    max_size: NonZeroUsize,
}

impl<S> Generator<BytesInput, S> for RandPrintablesGenerator
where
    S: HasRand,
{
    fn generate(&mut self, state: &mut S) -> Result<BytesInput, Error> {
        let mut size = state
            .rand_mut()
            .between(self.min_size.get(), self.max_size.get());
        size = max(size, 1);
        let printables = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz \t\n!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~".as_bytes();
        let random_bytes: Vec<u8> = (0..size)
            .map(|_| *state.rand_mut().choose(printables).unwrap())
            .collect();
        Ok(BytesInput::new(random_bytes))
    }
}

impl RandPrintablesGenerator {
    /// Returns a new [`RandBytesGenerator`], generating up to `max_size` random bytes.
    #[must_use]
    pub fn new(max_size: NonZeroUsize) -> Self {
        Self {
            min_size: nonzero!(1),
            max_size,
        }
    }

    /// Returns a new [`RandPrintablesGenerator`], generating from `min_size` up to `max_size` random bytes.
    #[must_use]
    pub fn with_min_size(min_size: NonZeroUsize, max_size: NonZeroUsize) -> Self {
        Self { min_size, max_size }
    }
}