/* This file is part of solidity. solidity is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. solidity is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with solidity. If not, see . */ // SPDX-License-Identifier: GPL-3.0 #include #include #include #include #include #include #include #include #include #include #include #include using namespace std; using namespace solidity; using namespace solidity::util; using namespace solidity::langutil; using namespace solidity::yul; using namespace solidity::yul::test; using namespace solidity::yul::test::yul_fuzzer; namespace { void printErrors(ostream& _stream, ErrorList const& _errors) { SourceReferenceFormatter formatter(_stream, false, false); for (auto const& error: _errors) formatter.printExceptionInformation( *error, (error->type() == Error::Type::Warning) ? "Warning" : "Error" ); } } DEFINE_PROTO_FUZZER(Program const& _input) { ProtoConverter converter; string yul_source = converter.programToString(_input); EVMVersion version = converter.version(); if (const char* dump_path = getenv("PROTO_FUZZER_DUMP_PATH")) { // With libFuzzer binary run this to generate a YUL source file x.yul: // PROTO_FUZZER_DUMP_PATH=x.yul ./a.out proto-input ofstream of(dump_path); of.write(yul_source.data(), static_cast(yul_source.size())); } YulStringRepository::reset(); // AssemblyStack entry point AssemblyStack stack( version, AssemblyStack::Language::StrictAssembly, solidity::frontend::OptimiserSettings::full() ); // Parse protobuf mutated YUL code if ( !stack.parseAndAnalyze("source", yul_source) || !stack.parserResult()->code || !stack.parserResult()->analysisInfo || !Error::containsOnlyWarnings(stack.errors()) ) { printErrors(std::cout, stack.errors()); yulAssert(false, "Proto fuzzer generated malformed program"); } ostringstream os1; ostringstream os2; yulFuzzerUtil::TerminationReason termReason = yulFuzzerUtil::interpret( os1, stack.parserResult()->code, EVMDialect::strictAssemblyForEVMObjects(version) ); if ( termReason == yulFuzzerUtil::TerminationReason::StepLimitReached || termReason == yulFuzzerUtil::TerminationReason::TraceLimitReached || termReason == yulFuzzerUtil::TerminationReason::ExpresionNestingLimitReached ) return; YulOptimizerTestCommon optimizerTest( stack.parserResult(), EVMDialect::strictAssemblyForEVMObjects(version) ); optimizerTest.setStep(optimizerTest.randomOptimiserStep(_input.step())); shared_ptr astBlock = optimizerTest.run(); yulAssert(astBlock != nullptr, "Optimiser error."); termReason = yulFuzzerUtil::interpret( os2, astBlock, EVMDialect::strictAssemblyForEVMObjects(version) ); if ( termReason == yulFuzzerUtil::TerminationReason::StepLimitReached || termReason == yulFuzzerUtil::TerminationReason::TraceLimitReached || termReason == yulFuzzerUtil::TerminationReason::ExpresionNestingLimitReached ) return; bool isTraceEq = (os1.str() == os2.str()); yulAssert(isTraceEq, "Interpreted traces for optimized and unoptimized code differ."); return; }