/* This file is part of solidity. solidity is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. solidity is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with solidity. If not, see . */ #include #include #include #include using namespace solidity::test::abiv2fuzzer; using namespace solidity::test; using namespace solidity::util; using namespace solidity; using namespace std; static constexpr size_t abiCoderHeapSize = 1024 * 512; static evmc::VM evmone = evmc::VM{evmc_create_evmone()}; /// Expected output value is decimal 0 static vector const expectedOutput(32, 0); DEFINE_PROTO_FUZZER(Contract const& _contract) { ProtoConverter converter; string contractSource = converter.contractToString(_contract); if (const char* dump_path = getenv("PROTO_FUZZER_DUMP_PATH")) { // With libFuzzer binary run this to generate the solidity source file x.sol from a proto input: // PROTO_FUZZER_DUMP_PATH=x.sol ./a.out proto-input ofstream of(dump_path); of << contractSource; } string typeString = converter.isabelleTypeString(); string valueString = converter.isabelleValueString(); abicoder::ABICoder coder(abiCoderHeapSize); if (!typeString.empty() && converter.coderFunction()) { auto [encodeStatus, encodedData] = coder.encode(typeString, valueString); solAssert(encodeStatus, "Isabelle abicoder fuzzer: Encoding failed"); // Raw runtime byte code generated by solidity bytes byteCode; string hexEncodedInput; try { // Compile contract generated by the proto fuzzer SolidityCompilationFramework solCompilationFramework; string contractName = ":C"; byteCode = solCompilationFramework.compileContract(contractSource, contractName); Json::Value methodIdentifiers = solCompilationFramework.getMethodIdentifiers(); // We always call the second function from the list of alphabetically // sorted interface functions hexEncodedInput = (++methodIdentifiers.begin())->asString() + encodedData.substr(2, encodedData.size()); } // Ignore stack too deep errors during compilation catch (solidity::evmasm::StackTooDeepException const&) { return; } // We target the default EVM which is the latest solidity::langutil::EVMVersion version; EVMHost hostContext(version, evmone); // Deploy contract and signal failure if deployment failed evmc::result createResult = AbiV2Utility::deployContract(hostContext, byteCode); solAssert( createResult.status_code == EVMC_SUCCESS, "Proto ABIv2 Fuzzer: Contract creation failed" ); // Execute test function and signal failure if EVM reverted or // did not return expected output on successful execution. evmc::result callResult = AbiV2Utility::executeContract( hostContext, fromHex(hexEncodedInput), createResult.create_address ); // We don't care about EVM One failures other than EVMC_REVERT solAssert(callResult.status_code != EVMC_REVERT, "Proto ABIv2 fuzzer: EVM One reverted"); if (callResult.status_code == EVMC_SUCCESS) solAssert( AbiV2Utility::isOutputExpected(callResult.output_data, callResult.output_size, expectedOutput), "Proto ABIv2 fuzzer: ABIv2 coding failure found" ); } return; }