// // immer: immutable data structures for C++ // Copyright (C) 2016, 2017, 2018 Juan Pedro Bolivar Puente // // This software is distributed under the Boost Software License, Version 1.0. // See accompanying file LICENSE or copy at http://boost.org/LICENSE_1_0.txt // #include "input.hpp" #include #include #include #include #include #include using st_memory = immer::memory_policy, immer::unsafe_refcount_policy, immer::no_lock_policy, immer::no_transience_policy, false>; struct colliding_hash_t { std::size_t operator()(std::size_t x) const { return x & ~15; } }; namespace { int run_input(const std::uint8_t* data, std::size_t size) { constexpr auto var_count = 4; using set_t = immer::set, st_memory>; auto vars = std::array{}; auto is_valid_var = [&](auto idx) { return idx >= 0 && idx < var_count; }; return fuzzer_input{data, size}.run([&](auto& in) { enum ops { op_insert, op_erase, op_insert_move, op_erase_move, op_iterate, op_diff }; auto src = read(in, is_valid_var); auto dst = read(in, is_valid_var); switch (read(in)) { case op_insert: { auto value = read(in); vars[dst] = vars[src].insert(value); break; } case op_erase: { auto value = read(in); vars[dst] = vars[src].erase(value); break; } case op_insert_move: { auto value = read(in); vars[dst] = std::move(vars[src]).insert(value); break; } case op_erase_move: { auto value = read(in); vars[dst] = vars[src].erase(value); break; } case op_iterate: { auto srcv = vars[src]; for (const auto& v : srcv) { vars[dst] = vars[dst].insert(v); } break; } case op_diff: { auto&& a = vars[src]; auto&& b = vars[dst]; diff( a, b, [&](auto&& x) { assert(!a.count(x)); assert(b.count(x)); }, [&](auto&& x) { assert(a.count(x)); assert(!b.count(x)); }, [&](auto&& x, auto&& y) { assert(false); }); } default: break; }; return true; }); } } // namespace TEST_CASE("https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47693") { SECTION("fuzzer") { auto input = load_input( "clusterfuzz-testcase-minimized-set-st-4717454829420544"); CHECK(run_input(input.data(), input.size()) == 0); } }