encounter
/
dawn-cmake
mirror of https://github.com/encounter/dawn-cmake.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Adding fuzzing for Transforms 

Fuzz all transforms being applied together, and fuzz each transform
separately.

BUG=tint:436

Change-Id: I53cf2e05c69f495f27bfa428f55ec033a85a612a
Reviewed-on: https://dawn-review.googlesource.com/c/tint/+/36945
Commit-Queue: Ryan Harrison <rharrison@chromium.org>
Auto-Submit: Ryan Harrison <rharrison@chromium.org>
Reviewed-by: David Neto <dneto@google.com>
Reviewed-by: dan sinclair <dsinclair@chromium.org>
This commit is contained in:
Ryan Harrison 2021-01-08 02:42:43 +00:00 committed by Commit Bot service account
parent 39545b7e7c
commit 4a29008c7e
8 changed files with 184 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
BUILD.gn
View File

@ -1344,6 +1344,42 @@ if (build_with_chromium) {
":tint_fuzzer_common",
]
}
fuzzer_test("tint_all_transforms_fuzzer") {
sources = [ "fuzzers/tint_all_transforms_fuzzer.cc" ]
deps = [
":libtint_spv_writer_src",
":libtint_wgsl_reader_src",
":tint_fuzzer_common",
]
}
fuzzer_test("tint_bound_array_accessors_fuzzer") {
sources = [ "fuzzers/tint_bound_array_accessors_fuzzer.cc" ]
deps = [
":libtint_spv_writer_src",
":libtint_wgsl_reader_src",
":tint_fuzzer_common",
]
}
fuzzer_test("tint_emit_vertex_point_size_fuzzer") {
sources = [ "fuzzers/tint_emit_vertex_point_size_fuzzer.cc" ]
deps = [
":libtint_spv_writer_src",
":libtint_wgsl_reader_src",
":tint_fuzzer_common",
]
}
fuzzer_test("tint_first_index_offset_fuzzer") {
sources = [ "fuzzers/tint_first_index_offset_fuzzer.cc" ]
deps = [
":libtint_spv_writer_src",
":libtint_wgsl_reader_src",
":tint_fuzzer_common",
]
}
}
if (tint_build_wgsl_reader && tint_build_hlsl_writer) {

4
fuzzers/CMakeLists.txt
View File

@ -30,6 +30,10 @@ if ({$TINT_BUILD_WGSL_READER} AND ${TINT_BUILD_WGSL_WRITER})
endif()
if ({$TINT_BUILD_WGSL_READER} AND ${TINT_BUILD_SPV_WRITER})
add_tint_fuzzer(tint_all_transforms_fuzzer)
add_tint_fuzzer(tint_bound_array_accessors_fuzzer)
add_tint_fuzzer(tint_emit_vertex_point_size_fuzzer)
add_tint_fuzzer(tint_first_index_offset_fuzzer)
add_tint_fuzzer(tint_wgsl_reader_spv_writer_fuzzer)
endif()

36
fuzzers/tint_all_transforms_fuzzer.cc Normal file
View File

@ -0,0 +1,36 @@
// Copyright 2021 The Tint Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include "fuzzers/tint_common_fuzzer.h"
namespace tint {
namespace fuzzers {
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
tint::transform::Manager transform_manager;
transform_manager.append(
std::make_unique<tint::transform::BoundArrayAccessors>());
transform_manager.append(
std::make_unique<tint::transform::EmitVertexPointSize>());
transform_manager.append(
std::make_unique<tint::transform::FirstIndexOffset>(0, 0));
tint::fuzzers::CommonFuzzer fuzzer(InputFormat::kWGSL, OutputFormat::kSpv);
fuzzer.SetTransformManager(&transform_manager);
return fuzzer.Run(data, size);
}
} // namespace fuzzers
} // namespace tint

32
fuzzers/tint_bound_array_accessors_fuzzer.cc Normal file
View File

@ -0,0 +1,32 @@
// Copyright 2021 The Tint Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include "fuzzers/tint_common_fuzzer.h"
namespace tint {
namespace fuzzers {
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
tint::transform::Manager transform_manager;
transform_manager.append(
std::make_unique<tint::transform::BoundArrayAccessors>());
tint::fuzzers::CommonFuzzer fuzzer(InputFormat::kWGSL, OutputFormat::kSpv);
fuzzer.SetTransformManager(&transform_manager);
return fuzzer.Run(data, size);
}
} // namespace fuzzers
} // namespace tint

9
fuzzers/tint_common_fuzzer.cc
View File

@ -87,6 +87,15 @@ int CommonFuzzer::Run(const uint8_t* data, size_t size) {
return 0;
}
if (transform_manager_) {
auto out = transform_manager_->Run(&mod);
if (out.diagnostics.contains_errors()) {
return 0;
}
mod = std::move(out.module);
}
std::unique_ptr<tint::writer::Writer> writer;
switch (output_) {

3
fuzzers/tint_common_fuzzer.h
View File

@ -29,11 +29,14 @@ class CommonFuzzer {
explicit CommonFuzzer(InputFormat input, OutputFormat output);
~CommonFuzzer();
void SetTransformManager(transform::Manager* tm) { transform_manager_ = tm; }
int Run(const uint8_t* data, size_t size);
private:
InputFormat input_;
OutputFormat output_;
transform::Manager* transform_manager_;
};
} // namespace fuzzers

32
fuzzers/tint_emit_vertex_point_size_fuzzer.cc Normal file
View File

@ -0,0 +1,32 @@
// Copyright 2021 The Tint Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include "fuzzers/tint_common_fuzzer.h"
namespace tint {
namespace fuzzers {
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
tint::transform::Manager transform_manager;
transform_manager.append(
std::make_unique<tint::transform::EmitVertexPointSize>());
tint::fuzzers::CommonFuzzer fuzzer(InputFormat::kWGSL, OutputFormat::kSpv);
fuzzer.SetTransformManager(&transform_manager);
return fuzzer.Run(data, size);
}
} // namespace fuzzers
} // namespace tint

32
fuzzers/tint_first_index_offset_fuzzer.cc Normal file
View File

@ -0,0 +1,32 @@
// Copyright 2021 The Tint Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include "fuzzers/tint_common_fuzzer.h"
namespace tint {
namespace fuzzers {
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
tint::transform::Manager transform_manager;
transform_manager.append(
std::make_unique<tint::transform::FirstIndexOffset>(0, 0));
tint::fuzzers::CommonFuzzer fuzzer(InputFormat::kWGSL, OutputFormat::kSpv);
fuzzer.SetTransformManager(&transform_manager);
return fuzzer.Run(data, size);
}
} // namespace fuzzers
} // namespace tint