// Copyright 2015 syzkaller project authors. All rights reserved. // Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. // mutates mutates a given program and prints result. package main import ( "flag" "fmt" "io/ioutil" "math/rand" "os" "runtime" "strings" "time" "github.com/google/syzkaller/pkg/mgrconfig" "github.com/google/syzkaller/prog" _ "github.com/google/syzkaller/sys" ) var ( flagOS = flag.String("os", runtime.GOOS, "target os") flagArch = flag.String("arch", runtime.GOARCH, "target arch") flagSeed = flag.Int("seed", -1, "prng seed") flagLen = flag.Int("len", 30, "number of calls in programs") flagEnable = flag.String("enable", "", "comma-separated list of enabled syscalls") ) func main() { flag.Parse() target, err := prog.GetTarget(*flagOS, *flagArch) if err != nil { fmt.Fprintf(os.Stderr, "%v", err) os.Exit(1) } var syscalls map[*prog.Syscall]bool if *flagEnable != "" { syscallsIDs, err := mgrconfig.ParseEnabledSyscalls(target, strings.Split(*flagEnable, ","), nil) if err != nil { fmt.Fprintf(os.Stderr, "failed to parse enabled syscalls: %v", err) os.Exit(1) } syscalls = make(map[*prog.Syscall]bool) for id := range syscallsIDs { syscalls[target.Syscalls[id]] = true } var disabled map[*prog.Syscall]string syscalls, disabled = target.TransitivelyEnabledCalls(syscalls) for c, reason := range disabled { fmt.Fprintf(os.Stderr, "disabling %v: %v\n", c.Name, reason) } } seed := time.Now().UnixNano() if *flagSeed != -1 { seed = int64(*flagSeed) } rs := rand.NewSource(seed) prios := target.CalculatePriorities(nil) ct := target.BuildChoiceTable(prios, syscalls) var p *prog.Prog if flag.NArg() == 0 { p = target.Generate(rs, *flagLen, ct) } else { data, err := ioutil.ReadFile(flag.Arg(0)) if err != nil { fmt.Fprintf(os.Stderr, "failed to read prog file: %v\n", err) os.Exit(1) } p, err = target.Deserialize(data) if err != nil { fmt.Fprintf(os.Stderr, "failed to deserialize the program: %v\n", err) os.Exit(1) } p.Mutate(rs, *flagLen, ct, nil) } fmt.Printf("%s\n", p.Serialize()) }