// Copyright 2021 The Tint Authors. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. #ifndef FUZZERS_TINT_SPIRV_TOOLS_FUZZER_SPIRV_OPT_MUTATOR_H_ #define FUZZERS_TINT_SPIRV_TOOLS_FUZZER_SPIRV_OPT_MUTATOR_H_ #include #include #include #include #include "fuzzers/tint_spirv_tools_fuzzer/mutator.h" #include "spirv-tools/libspirv.h" namespace tint { namespace fuzzers { namespace spvtools_fuzzer { /// Mutates the SPIR-V module using the spirv-opt tool. /// /// The initial `binary` must be valid according to `target_env`. On each call /// to the `Mutate` method the mutator selects `opt_batch_size` random /// optimization passes (with substitutions) and applies them to the binary. class SpirvOptMutator : public Mutator { public: /// Constructor. /// @param target_env - target environment for the `binary`. /// @param seed - seed for the RNG. /// @param binary - SPIR-V binary. Must be valid. /// @param validate_after_each_opt - whether to validate the binary after each /// optimization pass. /// @param opt_batch_size - the maximum number of optimization passes that /// will be applied in a single call to `Mutate`. If it's equal to 0 then /// all available optimization passes are applied. SpirvOptMutator(spv_target_env target_env, uint32_t seed, std::vector binary, bool validate_after_each_opt, uint32_t opt_batch_size); Result Mutate() override; std::vector GetBinary() const override; void LogErrors(const std::string* path, uint32_t count) const override; std::string GetErrors() const override; private: // Number of times this mutator was executed. uint32_t num_executions_; // Whether the last execution left it in a valid state. bool is_valid_; // Target environment for the SPIR-V binary. const spv_target_env target_env_; // The original SPIR-V binary. Useful for debugging. const std::vector original_binary_; // The seed for the RNG. Useful for debugging. const uint32_t seed_; // All the optimization passes available. const std::vector opt_passes_; // The result of the optimization. std::vector optimized_binary_; // Whether we need to validate the binary after each optimization pass. const bool validate_after_each_opt_; // The number of optimization passes to apply at once. const uint32_t opt_batch_size_; // All the errors produced by the optimizer. std::stringstream errors_; // The random number generator initialized with `seed_`. std::mt19937 rng_; }; } // namespace spvtools_fuzzer } // namespace fuzzers } // namespace tint #endif // FUZZERS_TINT_SPIRV_TOOLS_FUZZER_SPIRV_OPT_MUTATOR_H_