/* This file is part of solidity. solidity is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. solidity is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with solidity. If not, see . */ #include #include #include #include #include #include #include #include #include #include #include using namespace yul; using namespace yul::test::yul_fuzzer; using namespace std; using namespace langutil; using namespace dev; using namespace yul::test; namespace { void printErrors(ostream& _stream, ErrorList const& _errors) { SourceReferenceFormatter formatter(_stream); for (auto const& error: _errors) formatter.printExceptionInformation( *error, (error->type() == Error::Type::Warning) ? "Warning" : "Error" ); } } DEFINE_PROTO_FUZZER(Program const& _input) { string yul_source = ProtoConverter().programToString(_input); if (const char* dump_path = getenv("PROTO_FUZZER_DUMP_PATH")) { // With libFuzzer binary run this to generate a YUL source file x.yul: // PROTO_FUZZER_DUMP_PATH=x.yul ./a.out proto-input ofstream of(dump_path); of.write(yul_source.data(), yul_source.size()); } YulStringRepository::reset(); // AssemblyStack entry point AssemblyStack stack( langutil::EVMVersion::istanbul(), AssemblyStack::Language::StrictAssembly, dev::solidity::OptimiserSettings::full() ); // Parse protobuf mutated YUL code if (!stack.parseAndAnalyze("source", yul_source) || !stack.parserResult()->code || !stack.parserResult()->analysisInfo) { printErrors(std::cout, stack.errors()); yulAssert(false, "Proto fuzzer generated malformed program"); } ostringstream os1; ostringstream os2; yulFuzzerUtil::TerminationReason termReason = yulFuzzerUtil::interpret( os1, stack.parserResult()->code, EVMDialect::strictAssemblyForEVMObjects(langutil::EVMVersion::istanbul()) ); if (termReason == yulFuzzerUtil::TerminationReason::StepLimitReached) return; stack.optimize(); termReason = yulFuzzerUtil::interpret( os2, stack.parserResult()->code, EVMDialect::strictAssemblyForEVMObjects(langutil::EVMVersion::istanbul()), (yul::test::yul_fuzzer::yulFuzzerUtil::maxSteps * 4) ); bool isTraceEq = (os1.str() == os2.str()); yulAssert(isTraceEq, "Interpreted traces for optimized and unoptimized code differ."); return; }