Skip to content

Commit

Permalink
begin work on differential fuzzers
Browse files Browse the repository at this point in the history
  • Loading branch information
addisoncrump committed Jul 15, 2023
1 parent a91d953 commit b0fcd6f
Show file tree
Hide file tree
Showing 2 changed files with 69 additions and 0 deletions.
4 changes: 4 additions & 0 deletions fuzz/Cargo.toml
Expand Up @@ -67,6 +67,10 @@ path = "fuzz_targets/ast_fuzz_regex.rs"
name = "ast_fuzz_match_bytes"
path = "fuzz_targets/ast_fuzz_match_bytes.rs"

[[bin]]
name = "ast_diff_default"
path = "fuzz_targets/ast_diff_default.rs"

[profile.release]
opt-level = 3
debug = true
Expand Down
65 changes: 65 additions & 0 deletions fuzz/fuzz_targets/ast_diff_default.rs
@@ -0,0 +1,65 @@
#![no_main]

use {
libfuzzer_sys::{fuzz_target, Corpus},
regex::RegexBuilder,
regex_automata::nfa::thompson::pikevm::PikeVM as NfaRegex,
regex_syntax::ast::Ast,
};

#[derive(Eq, PartialEq, arbitrary::Arbitrary)]
struct FuzzData {
ast: Ast,
haystack: String,
}

impl std::fmt::Debug for FuzzData {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
let mut builder = f.debug_struct("FuzzData");
builder.field("ast", &format!("{}", self.ast));
builder.field("haystack", &self.haystack);
builder.finish()
}
}

fuzz_target!(|data: FuzzData| -> Corpus {
let _ = env_logger::try_init();

let pattern = format!("{}", data.ast);
let Ok(re) = RegexBuilder::new(&pattern).size_limit(1<<20).build() else {
return Corpus::Reject;
};
let Ok(baseline) = NfaRegex::new(&pattern) else {
return Corpus::Reject; // should we error here?
};
let mut cache = baseline.create_cache();

assert_eq!(
re.is_match(&data.haystack),
baseline.is_match(&mut cache, &data.haystack)
);
let found1 = re.find(&data.haystack);
let found2 = baseline.find(&mut cache, &data.haystack);
if let Some(found1) = found1 {
let found2 = found2.expect("Found in target, but not in baseline!");
assert_eq!(found1.start(), found2.start());
assert_eq!(found1.end(), found2.end());
}
if let Some(captures) = re.captures(&data.haystack) {
let mut baseline_captures = baseline.create_captures();

baseline.captures(&mut cache, &data.haystack, &mut baseline_captures);
drop(cache);
assert_eq!(captures.len(), baseline_captures.group_len());
for (c1, c2) in captures.iter().zip(baseline_captures.iter()) {
if let Some(c1) = c1 {
let c2 = c2.expect("Matched in target, but not baseline!");
assert_eq!(c1.start(), c2.start);
assert_eq!(c1.end(), c2.end);
} else {
assert!(!c2.is_some(), "Matched in baseline, but not target!");
}
}
}
Corpus::Keep
});

0 comments on commit b0fcd6f

Please sign in to comment.