Lines Matching +full:- +full:o1
55 /* For base-64 fuzzing */
74 size_t o1, o2; member
106 return -1; in fuzz_fmt()
108 switch (fuzz->strategy) { in fuzz_fmt()
111 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
112 fuzz->o1, fuzz->slen * 8, fuzz->o1); in fuzz_fmt()
116 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
117 (((fuzz_ullong)fuzz->o2) * fuzz->slen * 8) + fuzz->o1, in fuzz_fmt()
118 ((fuzz_ullong)fuzz->slen * 8) * fuzz->slen * 8, in fuzz_fmt()
119 fuzz->o1, fuzz->o2); in fuzz_fmt()
123 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
124 fuzz->o1, fuzz->slen, fuzz->o1); in fuzz_fmt()
128 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
129 (((fuzz_ullong)fuzz->o2) * fuzz->slen) + fuzz->o1, in fuzz_fmt()
130 ((fuzz_ullong)fuzz->slen) * fuzz->slen, in fuzz_fmt()
131 fuzz->o1, fuzz->o2); in fuzz_fmt()
135 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
136 fuzz->o1, fuzz->slen, fuzz->o1); in fuzz_fmt()
140 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
141 fuzz->o1, fuzz->slen, fuzz->o1); in fuzz_fmt()
144 assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1); in fuzz_fmt()
146 fuzz_ntop(fuzz->strategy), in fuzz_fmt()
147 (fuzz->o1 * (fuzz_ullong)64) + fuzz->o2, in fuzz_fmt()
148 fuzz->slen * (fuzz_ullong)64, fuzz->o1, in fuzz_fmt()
149 fuzz_b64chars[fuzz->o2]); in fuzz_fmt()
152 return -1; in fuzz_fmt()
193 fprintf(stderr, "fuzz original %p len = %zu\n", fuzz->seed, fuzz->slen); in fuzz_dump()
194 dump(fuzz->seed, fuzz->slen); in fuzz_dump()
223 ret->seed = malloc(l); in fuzz_begin()
224 assert(ret->seed != NULL); in fuzz_begin()
225 memcpy(ret->seed, p, l); in fuzz_begin()
226 ret->slen = l; in fuzz_begin()
227 ret->strategies = strategies; in fuzz_begin()
229 assert(ret->slen < SIZE_MAX / 8); in fuzz_begin()
230 assert(ret->strategies <= (FUZZ_MAX|(FUZZ_MAX-1))); in fuzz_begin()
253 assert(fuzz->seed != NULL); in fuzz_cleanup()
254 assert(fuzz->fuzzed != NULL); in fuzz_cleanup()
255 free(fuzz->seed); in fuzz_cleanup()
256 free(fuzz->fuzzed); in fuzz_cleanup()
263 FUZZ_DBG(("fuzz = %p, strategy = %s, o1 = %zu, o2 = %zu, slen = %zu", in fuzz_strategy_done()
264 fuzz, fuzz_ntop(fuzz->strategy), fuzz->o1, fuzz->o2, fuzz->slen)); in fuzz_strategy_done()
266 switch (fuzz->strategy) { in fuzz_strategy_done()
268 return fuzz->o1 >= fuzz->slen * 8; in fuzz_strategy_done()
270 return fuzz->o2 >= fuzz->slen * 8; in fuzz_strategy_done()
272 return fuzz->o2 >= fuzz->slen; in fuzz_strategy_done()
277 return fuzz->o1 >= fuzz->slen; in fuzz_strategy_done()
289 "o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy), in fuzz_next()
290 (u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen)); in fuzz_next()
292 if (fuzz->strategy == 0 || fuzz_strategy_done(fuzz)) { in fuzz_next()
294 if (fuzz->fuzzed == NULL) { in fuzz_next()
296 fuzz->fuzzed = calloc(fuzz->slen, 1); in fuzz_next()
301 if ((fuzz->strategies & i) != 0) { in fuzz_next()
302 fuzz->strategy = i; in fuzz_next()
306 FUZZ_DBG(("selected = %u", fuzz->strategy)); in fuzz_next()
307 if (fuzz->strategy == 0) { in fuzz_next()
311 fuzz->strategies &= ~(fuzz->strategy); in fuzz_next()
312 fuzz->o1 = fuzz->o2 = 0; in fuzz_next()
315 assert(fuzz->fuzzed != NULL); in fuzz_next()
317 switch (fuzz->strategy) { in fuzz_next()
319 assert(fuzz->o1 / 8 < fuzz->slen); in fuzz_next()
320 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
321 fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8); in fuzz_next()
322 fuzz->o1++; in fuzz_next()
325 assert(fuzz->o1 / 8 < fuzz->slen); in fuzz_next()
326 assert(fuzz->o2 / 8 < fuzz->slen); in fuzz_next()
327 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
328 fuzz->fuzzed[fuzz->o1 / 8] ^= 1 << (fuzz->o1 % 8); in fuzz_next()
329 fuzz->fuzzed[fuzz->o2 / 8] ^= 1 << (fuzz->o2 % 8); in fuzz_next()
330 fuzz->o1++; in fuzz_next()
331 if (fuzz->o1 >= fuzz->slen * 8) { in fuzz_next()
332 fuzz->o1 = 0; in fuzz_next()
333 fuzz->o2++; in fuzz_next()
337 assert(fuzz->o1 < fuzz->slen); in fuzz_next()
338 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
339 fuzz->fuzzed[fuzz->o1] ^= 0xff; in fuzz_next()
340 fuzz->o1++; in fuzz_next()
343 assert(fuzz->o1 < fuzz->slen); in fuzz_next()
344 assert(fuzz->o2 < fuzz->slen); in fuzz_next()
345 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
346 fuzz->fuzzed[fuzz->o1] ^= 0xff; in fuzz_next()
347 fuzz->fuzzed[fuzz->o2] ^= 0xff; in fuzz_next()
348 fuzz->o1++; in fuzz_next()
349 if (fuzz->o1 >= fuzz->slen) { in fuzz_next()
350 fuzz->o1 = 0; in fuzz_next()
351 fuzz->o2++; in fuzz_next()
356 assert(fuzz->o1 < fuzz->slen); in fuzz_next()
357 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
358 fuzz->o1++; in fuzz_next()
361 assert(fuzz->o1 < fuzz->slen); in fuzz_next()
362 assert(fuzz->o2 < sizeof(fuzz_b64chars) - 1); in fuzz_next()
363 memcpy(fuzz->fuzzed, fuzz->seed, fuzz->slen); in fuzz_next()
364 fuzz->fuzzed[fuzz->o1] = fuzz_b64chars[fuzz->o2]; in fuzz_next()
365 fuzz->o2++; in fuzz_next()
366 if (fuzz->o2 >= sizeof(fuzz_b64chars) - 1) { in fuzz_next()
367 fuzz->o2 = 0; in fuzz_next()
368 fuzz->o1++; in fuzz_next()
376 "o1 = %zu, o2 = %zu, slen = %zu", fuzz, fuzz_ntop(fuzz->strategy), in fuzz_next()
377 (u_long)fuzz->strategies, fuzz->o1, fuzz->o2, fuzz->slen)); in fuzz_next()
383 if (fuzz_len(fuzz) != fuzz->slen) in fuzz_matches_original()
385 return memcmp(fuzz_ptr(fuzz), fuzz->seed, fuzz->slen) == 0; in fuzz_matches_original()
392 (u_long)fuzz->strategies)); in fuzz_done()
394 return fuzz_strategy_done(fuzz) && fuzz->strategies == 0; in fuzz_done()
400 assert(fuzz->fuzzed != NULL); in fuzz_len()
401 switch (fuzz->strategy) { in fuzz_len()
407 return fuzz->slen; in fuzz_len()
410 assert(fuzz->o1 <= fuzz->slen); in fuzz_len()
411 return fuzz->slen - fuzz->o1; in fuzz_len()
420 assert(fuzz->fuzzed != NULL); in fuzz_ptr()
421 switch (fuzz->strategy) { in fuzz_ptr()
427 return fuzz->fuzzed; in fuzz_ptr()
429 assert(fuzz->o1 <= fuzz->slen); in fuzz_ptr()
430 return fuzz->fuzzed + fuzz->o1; in fuzz_ptr()
432 assert(fuzz->o1 <= fuzz->slen); in fuzz_ptr()
433 return fuzz->fuzzed; in fuzz_ptr()