FileBasedFuzzerAgent.cpp [plain text]
#include "config.h"
#include "FileBasedFuzzerAgent.h"
#include "CodeBlock.h"
#include "FuzzerPredictions.h"
#include "JSCellInlines.h"
#include <wtf/AnsiColors.h>
namespace JSC {
FileBasedFuzzerAgent::FileBasedFuzzerAgent(VM& vm)
: FileBasedFuzzerAgentBase(vm)
{
}
SpeculatedType FileBasedFuzzerAgent::getPredictionInternal(CodeBlock* codeBlock, PredictionTarget& target, SpeculatedType original)
{
FuzzerPredictions& fuzzerPredictions = ensureGlobalFuzzerPredictions();
Optional<SpeculatedType> generated = fuzzerPredictions.predictionFor(target.lookupKey);
SourceProvider* provider = codeBlock->source().provider();
auto sourceUpToDivot = provider->source().substring(target.divot - target.startOffset, target.startOffset);
auto sourceAfterDivot = provider->source().substring(target.divot, target.endOffset);
switch (target.opcodeId) {
case op_to_this: case op_get_argument: return original;
case op_bitand: case op_bitor: case op_bitxor: case op_bitnot: case op_get_from_scope: case op_get_from_arguments: case op_get_by_val: case op_rshift: case op_lshift: case op_to_number: case op_get_by_id: if (!generated)
return original;
break;
case op_call: if (!generated) {
if (sourceAfterDivot.containsIgnoringASCIICase("of "))
return original;
if (sourceAfterDivot.containsIgnoringASCIICase("..."))
return original;
if (sourceAfterDivot.containsIgnoringASCIICase("yield"))
return original;
if (sourceAfterDivot.startsWith('[') && sourceAfterDivot.endsWith("]"))
return original;
if (sourceUpToDivot.containsIgnoringASCIICase("yield"))
return original;
if (sourceUpToDivot == "...")
return original;
if (!target.startOffset && !target.endOffset)
return original;
}
break;
case op_get_by_val_with_this:
case op_get_direct_pname:
case op_construct:
case op_construct_varargs:
case op_call_varargs:
case op_call_eval:
case op_tail_call:
case op_tail_call_varargs:
case op_get_by_id_with_this:
break;
default:
RELEASE_ASSERT_NOT_REACHED_WITH_MESSAGE("Unhandled opcode %s", opcodeNames[target.opcodeId]);
}
if (!generated) {
if (Options::dumpFuzzerAgentPredictions())
dataLogLn(MAGENTA(BOLD(target.bytecodeIndex)), " ", BOLD(YELLOW(target.opcodeId)), " missing prediction for: ", RED(BOLD(target.lookupKey)), " ", GREEN(target.sourceFilename), ":", CYAN(target.line), ":", CYAN(target.column), " divot: ", target.divot, " -", target.startOffset, " +", target.endOffset, " name: '", YELLOW(codeBlock->inferredName()), "' source: '", BLUE(sourceUpToDivot), BLUE(BOLD(sourceAfterDivot)), "'");
RELEASE_ASSERT_WITH_MESSAGE(!Options::requirePredictionForFileBasedFuzzerAgent(), "Missing expected prediction in FuzzerAgent");
return original;
}
if (Options::dumpFuzzerAgentPredictions())
dataLogLn(YELLOW(target.opcodeId), " ", CYAN(target.lookupKey), " original: ", CYAN(BOLD(SpeculationDump(original))), " generated: ", MAGENTA(BOLD(SpeculationDump(*generated))));
return *generated;
}
}