| // Copyright 2021 The Dawn & Tint Authors |
| // |
| // Redistribution and use in source and binary forms, with or without |
| // modification, are permitted provided that the following conditions are met: |
| // |
| // 1. Redistributions of source code must retain the above copyright notice, this |
| // list of conditions and the following disclaimer. |
| // |
| // 2. Redistributions in binary form must reproduce the above copyright notice, |
| // this list of conditions and the following disclaimer in the documentation |
| // and/or other materials provided with the distribution. |
| // |
| // 3. Neither the name of the copyright holder nor the names of its |
| // contributors may be used to endorse or promote products derived from |
| // this software without specific prior written permission. |
| // |
| // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" |
| // AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| // IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE |
| // DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE |
| // FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
| // DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR |
| // SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER |
| // CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
| // OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| |
| #ifndef SRC_TINT_FUZZERS_TINT_AST_FUZZER_MUTATOR_H_ |
| #define SRC_TINT_FUZZERS_TINT_AST_FUZZER_MUTATOR_H_ |
| |
| #include "src/tint/fuzzers/tint_ast_fuzzer/mutation.h" |
| #include "src/tint/fuzzers/tint_ast_fuzzer/mutation_finder.h" |
| #include "src/tint/fuzzers/tint_ast_fuzzer/node_id_map.h" |
| #include "src/tint/fuzzers/tint_ast_fuzzer/probability_context.h" |
| #include "src/tint/fuzzers/tint_ast_fuzzer/protobufs/tint_ast_fuzzer.h" |
| |
| #include "src/tint/lang/wgsl/program/program.h" |
| |
| namespace tint::fuzzers::ast_fuzzer { |
| /// @file |
| |
| /// @brief Tries to apply a `mutation` to the `program`. |
| /// |
| /// If the `mutation` is inapplicable, this function will return `false` and |
| /// `out_program`, `out_node_id_map` and `mutation_sequence` won't be modified. |
| /// |
| /// The `mutation` is required to produce a valid program when the |
| /// `Mutation::Apply` method is called. This guarantees that this function |
| /// returns a valid program as well. |
| /// |
| /// @param program - the initial program (must be valid). |
| /// @param mutation - the mutation that will be applied. |
| /// @param node_id_map - a map from `tint::ast::` nodes in the `program` to |
| /// their unique ids. |
| /// @param out_program - the resulting mutated program will be written through |
| /// this pointer. It may *not* be a `nullptr`. It _may_ point to `program`, |
| /// so that a program can be updated in place. |
| /// @param out_node_id_map - will contain new ids for the AST nodes in the |
| /// mutated program. It may *not* be a `nullptr`. It _may_ point to |
| /// `node_id_map`, so that a map can be updated in place. |
| /// @param mutation_sequence - the message about this mutation will be recorded |
| /// here. It may be a `nullptr`, in which case it's ignored. |
| /// @return `true` if the `mutation` was applied. |
| /// @return `false` if the `mutation` is inapplicable. |
| bool MaybeApplyMutation(const tint::Program& program, |
| const Mutation& mutation, |
| const NodeIdMap& node_id_map, |
| tint::Program& out_program, |
| NodeIdMap* out_node_id_map, |
| protobufs::MutationSequence* mutation_sequence); |
| |
| /// @brief Applies mutations from `mutations_sequence` to the `program`. |
| /// |
| /// All mutations in `mutation_sequence` must be applicable. Additionally, all |
| /// mutations must produce a valid program when the `Mutation::Apply` method is |
| /// called. This guarantees that this function returns a valid program as well. |
| /// |
| /// @param program - the initial program - must be valid. |
| /// @param mutation_sequence - a sequence of mutations. |
| /// @return the mutated program. |
| tint::Program Replay(tint::Program program, const protobufs::MutationSequence& mutation_sequence); |
| |
| /// @brief Applies up to `max_applied_mutations` mutations to the `program`. |
| /// |
| /// All applied mutations must produce valid programs. This guarantees that the |
| /// returned program is valid as well. The returned program may be identical to |
| /// the initial `program` if no mutation was applied. |
| /// |
| /// @param program - initial program - must be valid. |
| /// @param probability_context - contains information about various |
| /// probabilistic behaviour of the fuzzer. |
| /// @param enable_all_mutations - if `false`, only mutations from a |
| /// probabilistically selected set of mutation types are applied. If `true`, |
| /// all mutation types are considered. |
| /// @param max_applied_mutations - the maximum number of applied mutations. This |
| /// may not be 0. |
| /// @param mutation_sequence - applied mutations will be recorded into this |
| /// protobuf message. This argument may be `nullptr`, in which case it's |
| /// ignored. |
| /// @return the mutated program. |
| tint::Program Mutate(tint::Program program, |
| ProbabilityContext* probability_context, |
| bool enable_all_mutations, |
| uint32_t max_applied_mutations, |
| protobufs::MutationSequence* mutation_sequence); |
| |
| } // namespace tint::fuzzers::ast_fuzzer |
| |
| #endif // SRC_TINT_FUZZERS_TINT_AST_FUZZER_MUTATOR_H_ |