Struct CorpusManager 

pub(crate) struct CorpusManager {
    tx_generator: BoxedStrategy<BasicTxDetails>,
    mutation_generator: BoxedStrategy<MutationType>,
    config: FuzzCorpusConfig,
    in_memory_corpus: Vec<CorpusEntry>,
    current_mutated: Option<Uuid>,
    failed_replays: usize,
    history_map: Vec<u8>,
    pub(crate) metrics: CorpusMetrics,
}

Fuzz corpus manager, used in coverage guided fuzzing mode by both stateless and stateful tests.

Fields

tx_generator: BoxedStrategy<BasicTxDetails>

mutation_generator: BoxedStrategy<MutationType>

config: FuzzCorpusConfig

in_memory_corpus: Vec<CorpusEntry>

current_mutated: Option<Uuid>

failed_replays: usize

history_map: Vec<u8>

metrics: CorpusMetrics

Implementations

impl CorpusManager

pub fn new( config: FuzzCorpusConfig, tx_generator: BoxedStrategy<BasicTxDetails>, executor: &Executor, fuzzed_function: Option<&Function>, fuzzed_contracts: Option<&FuzzRunIdentifiedContracts>, ) -> Result<Self>

pub fn process_inputs(&mut self, inputs: &[BasicTxDetails], new_coverage: bool)

Updates stats for the given call sequence, if new coverage produced. Persists the call sequence (if corpus directory is configured and new coverage) and updates in-memory corpus.

pub fn new_inputs( &mut self, test_runner: &mut TestRunner, fuzz_state: &EvmFuzzState, targeted_contracts: &FuzzRunIdentifiedContracts, ) -> Result<Vec<BasicTxDetails>>

Generates new call sequence from in memory corpus. Evicts oldest corpus mutated more than configured max mutations value. Used by invariant test campaigns.

pub fn new_input( &mut self, test_runner: &mut TestRunner, fuzz_state: &EvmFuzzState, function: &Function, ) -> Result<Bytes>

Generates new input from in memory corpus. Evicts oldest corpus mutated more than configured max mutations value. Used by fuzz test campaigns.

pub fn generate_next_input( &mut self, test_runner: &mut TestRunner, sequence: &[BasicTxDetails], discarded: bool, depth: usize, ) -> Result<BasicTxDetails>

Returns the next call to be used in call sequence. If coverage guided fuzzing is not configured or if previous input was discarded then this is a new tx from strategy. If running with coverage guided fuzzing it returns a new call only when sequence does not have enough entries, or randomly. Otherwise, returns the next call from initial sequence.

pub fn new_tx(&mut self, test_runner: &mut TestRunner) -> Result<BasicTxDetails>

Generates single call from corpus strategy.

pub fn failed_replays(self) -> usize

Returns campaign failed replays.

pub fn merge_edge_coverage(&mut self, call_result: &mut RawCallResult) -> bool

Collects coverage from call result and updates metrics.

fn evict_oldest_corpus(&mut self) -> Result<()>

Flush the oldest corpus mutated more than configured max mutations unless they are favored.

fn abi_mutate( &self, tx: &mut BasicTxDetails, function: &Function, test_runner: &mut TestRunner, fuzz_state: &EvmFuzzState, ) -> Result<()>

Mutates calldata of provided tx by abi decoding current values and randomly selecting the inputs to change.

Layout

Note: Most layout information is completely unstable and may even differ between compilations. The only exception is types with certain repr(...) attributes. Please see the Rust Reference's “Type Layout” chapter for details on type layout guarantees.

Size: 192 bytes