cerc-io/solidity
16
0
Fork 0
mirror of https://github.com/ethereum/solidity synced 2023-10-03 13:03:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

solc fuzzers: Use compiler stack for fuzzing

Browse Source
This commit is contained in:
Bhargava Shastry 2020-02-28 12:48:59 +01:00
parent d55bbd4aa5
commit 9544df34d7
5 changed files with 72 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
test/tools/afl_fuzzer.cpp
View File

@ -124,7 +124,7 @@ Allowed options)",
else if (arguments.count("standard-json")) else if (arguments.count("standard-json"))
FuzzerUtil::testStandardCompiler(input, quiet); FuzzerUtil::testStandardCompiler(input, quiet);
else else
FuzzerUtil::testCompiler(input, optimize, quiet); FuzzerUtil::testCompilerJsonInterface(input, optimize, quiet);
} }
catch (...) catch (...)
{ {

99
test/tools/fuzzer_common.cpp
View File

@ -17,28 +17,87 @@
#include <test/tools/fuzzer_common.h> #include <test/tools/fuzzer_common.h>
#include <libsolidity/interface/CompilerStack.h>
#include <libsolutil/JSON.h> #include <libsolutil/JSON.h>
#include <libevmasm/Assembly.h> #include <libevmasm/Assembly.h>
#include <libevmasm/ConstantOptimiser.h> #include <libevmasm/ConstantOptimiser.h>
#include <libsolc/libsolc.h> #include <libsolc/libsolc.h>
#include <liblangutil/Exceptions.h>
#include <sstream> #include <sstream>
using namespace std; using namespace std;
using namespace solidity; using namespace solidity;
using namespace solidity::util; using namespace solidity::util;
using namespace solidity::evmasm; using namespace solidity::evmasm;
using namespace solidity::langutil;
static vector<string> s_evmVersions = { static vector<EVMVersion> s_evmVersions = {
"homestead", EVMVersion::homestead(),
"tangerineWhistle", EVMVersion::tangerineWhistle(),
"spuriousDragon", EVMVersion::spuriousDragon(),
"byzantium", EVMVersion::byzantium(),
"constantinople", EVMVersion::constantinople(),
"petersburg", EVMVersion::petersburg(),
"istanbul" EVMVersion::istanbul(),
EVMVersion::berlin()
}; };
void FuzzerUtil::testCompilerJsonInterface(string const& _input, bool _optimize, bool _quiet)
{
if (!_quiet)
cout << "Testing compiler " << (_optimize ? "with" : "without") << " optimizer." << endl;
Json::Value config = Json::objectValue;
config["language"] = "Solidity";
config["sources"] = Json::objectValue;
config["sources"][""] = Json::objectValue;
config["sources"][""]["content"] = _input;
config["settings"] = Json::objectValue;
config["settings"]["optimizer"] = Json::objectValue;
config["settings"]["optimizer"]["enabled"] = _optimize;
config["settings"]["optimizer"]["runs"] = 200;
config["settings"]["evmVersion"] = "berlin";
// Enable all SourceUnit-level outputs.
config["settings"]["outputSelection"]["*"][""][0] = "*";
// Enable all Contract-level outputs.
config["settings"]["outputSelection"]["*"]["*"][0] = "*";
runCompiler(jsonCompactPrint(config), _quiet);
}
void FuzzerUtil::testCompiler(string const& _input, bool _optimize)
{
frontend::CompilerStack compiler;
EVMVersion evmVersion = s_evmVersions[_input.size() % s_evmVersions.size()];
frontend::OptimiserSettings optimiserSettings;
if (_optimize)
optimiserSettings = frontend::OptimiserSettings::standard();
else
optimiserSettings = frontend::OptimiserSettings::minimal();
compiler.setSources({{"", _input}});
compiler.setEVMVersion(evmVersion);
compiler.setOptimiserSettings(optimiserSettings);
try
{
compiler.compile();
}
catch (Error const&)
{
}
catch (FatalError const&)
{
}
catch (UnimplementedFeatureError const&)
{
}
}
void FuzzerUtil::runCompiler(string const& _input, bool _quiet) void FuzzerUtil::runCompiler(string const& _input, bool _quiet)
{ {
if (!_quiet) if (!_quiet)
@ -73,30 +132,6 @@ void FuzzerUtil::runCompiler(string const& _input, bool _quiet)
} }
} }
void FuzzerUtil::testCompiler(string const& _input, bool _optimize, bool _quiet)
{
if (!_quiet)
cout << "Testing compiler " << (_optimize ? "with" : "without") << " optimizer." << endl;
Json::Value config = Json::objectValue;
config["language"] = "Solidity";
config["sources"] = Json::objectValue;
config["sources"][""] = Json::objectValue;
config["sources"][""]["content"] = _input;
config["settings"] = Json::objectValue;
config["settings"]["optimizer"] = Json::objectValue;
config["settings"]["optimizer"]["enabled"] = _optimize;
config["settings"]["optimizer"]["runs"] = 200;
config["settings"]["evmVersion"] = s_evmVersions[_input.size() % s_evmVersions.size()];
// Enable all SourceUnit-level outputs.
config["settings"]["outputSelection"]["*"][""][0] = "*";
// Enable all Contract-level outputs.
config["settings"]["outputSelection"]["*"]["*"][0] = "*";
runCompiler(jsonCompactPrint(config), _quiet);
}
void FuzzerUtil::testConstantOptimizer(string const& _input, bool _quiet) void FuzzerUtil::testConstantOptimizer(string const& _input, bool _quiet)
{ {
if (!_quiet) if (!_quiet)

3
test/tools/fuzzer_common.h
View File

@ -24,7 +24,8 @@
struct FuzzerUtil struct FuzzerUtil
{ {
static void runCompiler(std::string const& _input, bool _quiet); static void runCompiler(std::string const& _input, bool _quiet);
static void testCompiler(std::string const& _input, bool _optimize, bool _quiet); static void testCompilerJsonInterface(std::string const& _input, bool _optimize, bool _quiet);
static void testConstantOptimizer(std::string const& _input, bool _quiet); static void testConstantOptimizer(std::string const& _input, bool _quiet);
static void testStandardCompiler(std::string const& _input, bool _quiet); static void testStandardCompiler(std::string const& _input, bool _quiet);
static void testCompiler(std::string const& _input, bool _optimize);
}; };

2
test/tools/ossfuzz/solc_noopt_ossfuzz.cpp
View File

@ -24,7 +24,7 @@ extern "C" int LLVMFuzzerTestOneInput(uint8_t const* _data, size_t _size)
if (_size <= 600) if (_size <= 600)
{ {
string input(reinterpret_cast<char const*>(_data), _size); string input(reinterpret_cast<char const*>(_data), _size);
FuzzerUtil::testCompiler(input, /*optimize=*/false, /*quiet=*/true); FuzzerUtil::testCompiler(input, /*optimize=*/false);
} }
return 0; return 0;
} }

2
test/tools/ossfuzz/solc_opt_ossfuzz.cpp
View File

@ -24,7 +24,7 @@ extern "C" int LLVMFuzzerTestOneInput(uint8_t const* _data, size_t _size)
if (_size <= 600) if (_size <= 600)
{ {
string input(reinterpret_cast<char const *>(_data), _size); string input(reinterpret_cast<char const *>(_data), _size);
FuzzerUtil::testCompiler(input, /*optimize=*/true, /*quiet=*/true); FuzzerUtil::testCompiler(input, /*optimize=*/true);
} }
return 0; return 0;
} }