pub struct MOpt {Show 27 fields
pub rand: StdRand,
pub total_finds: usize,
pub finds_until_last_swarm: usize,
pub w_init: f64,
pub w_end: f64,
pub w_now: f64,
pub g_now: f64,
pub g_max: f64,
pub operator_num: usize,
pub swarm_num: usize,
pub period_pilot: usize,
pub period_core: usize,
pub pilot_time: usize,
pub core_time: usize,
pub swarm_now: usize,
pub swarm_fitness: Vec<f64>,
pub pilot_operator_finds: Vec<Vec<u64>>,
pub pilot_operator_finds_v2: Vec<Vec<u64>>,
pub pilot_operator_cycles: Vec<Vec<u64>>,
pub pilot_operator_cycles_v2: Vec<Vec<u64>>,
pub pilot_operator_cycles_v3: Vec<Vec<u64>>,
pub operator_finds_puppet: Vec<u64>,
pub core_operator_finds: Vec<u64>,
pub core_operator_finds_v2: Vec<u64>,
pub core_operator_cycles: Vec<u64>,
pub core_operator_cycles_v2: Vec<u64>,
pub core_operator_cycles_v3: Vec<u64>,
/* private fields */
}
Expand description
A Struct for managing MOpt-mutator parameters.
There are 2 modes for MOpt
scheduler, the core fuzzing mode and the pilot fuzzing mode.
In short, in the pilot fuzzing mode, the fuzzer employs several swarms
to compute the probability to choose the mutation operator.
On the other hand, in the core fuzzing mode, the fuzzer chooses the best swarms
, which was determined during the pilot fuzzing mode, to compute the probability to choose the operation operator.
With the current implementation we are always in the pacemaker fuzzing mode.
Fields
rand: StdRand
Random number generator
total_finds: usize
The number of total findings (unique crashes and unique interesting paths). This is equivalent to state.corpus().count() + state.solutions().count()
;
finds_until_last_swarm: usize
The number of finds before until last swarm.
w_init: f64
These w_* and g_* values are the coefficients for updating variables according to the PSO algorithms
w_end: f64
These w_* and g_* values are the coefficients for updating variables according to the PSO algorithms
w_now: f64
These w_* and g_* values are the coefficients for updating variables according to the PSO algorithms
g_now: f64
These w_* and g_* values are the coefficients for updating variables according to the PSO algorithms
g_max: f64
These w_* and g_* values are the coefficients for updating variables according to the PSO algorithms
operator_num: usize
The number of mutation operators
swarm_num: usize
The number of swarms that we want to employ during the pilot fuzzing mode
period_pilot: usize
We’ll generate inputs for period_pilot
times before we call pso_update in pilot fuzzing module
period_core: usize
We’ll generate inputs for period_core
times before we call pso_update in core fuzzing module
pilot_time: usize
The number of testcases generated during this pilot fuzzing mode
core_time: usize
The number of testcases generated during this core fuzzing mode
swarm_now: usize
The swarm identifier that we are currently using in the pilot fuzzing mode
swarm_fitness: Vec<f64>
The fitness for each swarm, we’ll calculate the fitness in the pilot fuzzing mode and use the best one in the core fuzzing mode
pilot_operator_finds: Vec<Vec<u64>>
(Pilot Mode) Finds by each operators. This vector is used in pso_update
pilot_operator_finds_v2: Vec<Vec<u64>>
(Pilot Mode) Finds by each operator till now.
pilot_operator_cycles: Vec<Vec<u64>>
(Pilot Mode) The number of mutation operator used. This vector is used in pso_update
pilot_operator_cycles_v2: Vec<Vec<u64>>
(Pilot Mode) The number of mutation operator used till now
pilot_operator_cycles_v3: Vec<Vec<u64>>
(Pilot Mode) The number of mutation operator used till last execution
operator_finds_puppet: Vec<u64>
Vector used in pso_update
core_operator_finds: Vec<u64>
(Core Mode) Finds by each operators. This vector is used in pso_update
core_operator_finds_v2: Vec<u64>
(Core Mode) Finds by each operator till now.
core_operator_cycles: Vec<u64>
(Core Mode) The number of mutation operator used. This vector is used in pso_update
core_operator_cycles_v2: Vec<u64>
(Core Mode) The number of mutation operator used till now
core_operator_cycles_v3: Vec<u64>
(Core Mode) The number of mutation operator used till last execution
Implementations
sourceimpl MOpt
impl MOpt
sourcepub fn new(operator_num: usize, swarm_num: usize) -> Result<Self, Error>
pub fn new(operator_num: usize, swarm_num: usize) -> Result<Self, Error>
Creates a new MOpt
instance.
sourcepub fn pso_initialize(&mut self) -> Result<(), Error>
pub fn pso_initialize(&mut self) -> Result<(), Error>
initialize pso
sourcepub fn pso_update(&mut self) -> Result<(), Error>
pub fn pso_update(&mut self) -> Result<(), Error>
Update the PSO
algorithm parameters
See https://github.com/puppet-meteor/MOpt-AFL/blob/master/MOpt/afl-fuzz.c#L10623
sourcepub fn select_algorithm(&mut self) -> Result<usize, Error>
pub fn select_algorithm(&mut self) -> Result<usize, Error>
This function is used to decide the operator that we want to apply next see https://github.com/puppet-meteor/MOpt-AFL/blob/master/MOpt/afl-fuzz.c#L397
Trait Implementations
sourceimpl<'de> Deserialize<'de> for MOpt
impl<'de> Deserialize<'de> for MOpt
sourcefn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations
impl RefUnwindSafe for MOpt
impl Send for MOpt
impl Sync for MOpt
impl Unpin for MOpt
impl UnwindSafe for MOpt
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<Tail, T> Prepend<T> for Tail
impl<Tail, T> Prepend<T> for Tail
type PreprendResult = Tail
type PreprendResult = Tail
The Resulting TupleList
, of an Prepend::prepend()
call,
including the prepended entry. Read more
sourcefn prepend(self, value: T) -> (T, <Tail as Prepend<T>>::PreprendResult)
fn prepend(self, value: T) -> (T, <Tail as Prepend<T>>::PreprendResult)
Prepend a value to this tuple, returning a new tuple with prepended value.