Skip to main content Module invariant Copy item path Source use crate::executors::DURATION_BETWEEN_METRICS_REPORT ; 🔒 use crate::executors::EarlyExit ; 🔒 use crate::executors::EvmError ; 🔒 use crate::executors::Executor ; 🔒 use crate::executors::RawCallResult ; 🔒 use crate::executors::campaign::CampaignCallKind ; 🔒 use crate::executors::campaign::CampaignControl ; 🔒 use crate::executors::campaign::CampaignEvent ; 🔒 use crate::executors::campaign::CampaignSequenceOutcome ; 🔒 use crate::executors::campaign::FuzzCampaign ; 🔒 use crate::executors::campaign::FuzzCampaignMode ; 🔒 use crate::executors::corpus::CorpusInsertionMode ; 🔒 use crate::executors::corpus::DynamicTargetCtx ; 🔒 use crate::executors::corpus::ReplayTarget ; 🔒 use crate::executors::corpus::WorkerCorpus ; 🔒 use crate::executors::corpus::WorkerCorpusSeed ; 🔒 use crate::executors::corpus::persist_campaign_optimization ; 🔒 use crate::executors::fuzz::FuzzBranchFrontier ; 🔒 use crate::executors::fuzz::FuzzFrontierRecorder ; 🔒 use crate::executors::fuzz::StatefulFuzzBranchFrontierArtifact ; 🔒 use crate::executors::fuzz::merge_frontiers ; 🔒 use crate::executors::fuzz::write_frontier_artifact ; 🔒 use crate::executors::worker_seed ; 🔒 use crate::inspectors::Fuzzer ; 🔒 use alloy_dyn_abi::DynSolValue; 🔒 use alloy_dyn_abi::JsonAbiExt; 🔒 use alloy_json_abi::Function; 🔒 use alloy_json_abi::StateMutability; 🔒 use alloy_primitives::Address; 🔒 use alloy_primitives::Bytes; 🔒 use alloy_primitives::FixedBytes; 🔒 use alloy_primitives::I256; 🔒 use alloy_primitives::Selector; 🔒 use alloy_primitives::U256; 🔒 use alloy_primitives::map::AddressMap; 🔒 use alloy_primitives::map::AddressSet; 🔒 use alloy_primitives::map::HashMap; 🔒 use alloy_primitives::map::hash_map::Entry as AddressMapEntry; 🔒 use alloy_sol_types::SolCall; 🔒 use alloy_sol_types::sol; 🔒 use campaign::InvariantCampaignAggregator ; 🔒 use campaign::InvariantCampaignSpec ; 🔒 use campaign::InvariantCampaignState ; 🔒 use campaign::InvariantWorkerOutput ; 🔒 use campaign::InvariantWorkerPlan ; 🔒 use eyre::ContextCompat ; 🔒 use eyre::Result ; 🔒 use eyre::eyre ; 🔒 use foundry_common::TestFunctionExt ; 🔒 use foundry_common::contracts::ContractsByAddress ; 🔒 use foundry_common::contracts::ContractsByArtifact ; 🔒 use foundry_common::sh_eprintln ; 🔒 use foundry_common::sh_println ; 🔒 use foundry_config::FuzzCorpusConfig ; 🔒 use foundry_config::InvariantConfig ; 🔒 use foundry_config::InvariantDepthMode ; 🔒 use foundry_config::InvariantWorkers ; 🔒 use foundry_evm_core::constants::CALLER ; 🔒 use foundry_evm_core::constants::CHEATCODE_ADDRESS ; 🔒 use foundry_evm_core::constants::DEFAULT_CREATE2_DEPLOYER ; 🔒 use foundry_evm_core::constants::HARDHAT_CONSOLE_ADDRESS ; 🔒 use foundry_evm_core::constants::MAGIC_ASSUME ; 🔒 use foundry_evm_core::evm::FoundryEvmNetwork ; 🔒 use foundry_evm_core::precompiles::PRECOMPILES ; 🔒 use foundry_evm_coverage::HitMaps; 🔒 use foundry_evm_fuzz::BasicTxDetails ; 🔒 use foundry_evm_fuzz::FuzzCase ; 🔒 use foundry_evm_fuzz::FuzzFixtures ; 🔒 use foundry_evm_fuzz::ObservedCall ; 🔒 use foundry_evm_fuzz::invariant::ArtifactFilters ; 🔒 use foundry_evm_fuzz::invariant::FuzzRunIdentifiedContracts ; 🔒 use foundry_evm_fuzz::invariant::InvariantContract ; 🔒 use foundry_evm_fuzz::invariant::RandomCallGenerator ; 🔒 use foundry_evm_fuzz::invariant::SenderFilters ; 🔒 use foundry_evm_fuzz::invariant::TargetedContract ; 🔒 use foundry_evm_fuzz::invariant::TargetedContracts ; 🔒 use foundry_evm_fuzz::strategies::EvmFuzzState ; 🔒 use foundry_evm_fuzz::strategies::FuzzState ; 🔒 use foundry_evm_fuzz::strategies::TxGenerator ; 🔒 use foundry_evm_fuzz::strategies::override_call_strat ; 🔒 use foundry_evm_traces::CallTraceArena; 🔒 use foundry_evm_traces::SparsedTraceArena ; 🔒 use indicatif::ProgressBar; 🔒 use parking_lot::RwLock; 🔒 use proptest::prelude::Rng ; 🔒 use proptest::test_runner::RngAlgorithm; 🔒 use proptest::test_runner::TestRng; 🔒 use proptest::test_runner::TestRunner; 🔒 use rayon::iter::IntoParallelIterator; 🔒 use rayon::iter::ParallelIterator; 🔒 use result::assert_after_invariant ; 🔒 use result::can_continue ; 🔒 use result::invariant_preflight_check ; 🔒 use revm::state::Account; 🔒 use serde::Deserialize ; 🔒 use serde::Deserialize ; 🔒 use serde::Serialize ; 🔒 use serde::Serialize ; 🔒 use serde_json::Value ; 🔒 use serde_json::json ; 🔒 use std::collections::HashMap as Map; 🔒 use std::collections::HashSet ; 🔒 use std::collections::btree_map::Entry ; 🔒 use std::sync::Arc ; 🔒 use std::time::Duration ; 🔒 use std::time::Instant ; 🔒 use std::time::SystemTime ; 🔒 use std::time::UNIX_EPOCH ; 🔒 IInvariantTest Module containing a contract’s types and functions. campaign 🔒 error 🔒 replay 🔒 result 🔒 shrink 🔒 CheckSequenceOptions Options controlling how check_sequence evaluates a candidate call sequence. CheckSequenceOutcome Outcome from replaying an invariant call sequence through check_sequence HandlerAssertionFailure A handler-side assertion bug: a require/assert inside a fuzzed handler that the
campaign reached. Deduped by (reverter, selector) site (Echidna/Medusa semantics),
shortest sequence wins on collision. HandlerReplayOutcome Result of a strict handler-bug replay: anchor asserts, no earlier call asserts, and the
recomputed edge fingerprint identifies which path the assertion took. InvariantCampaignSeed 🔒 Immutable state selected once for a logical invariant campaign and cloned into each worker. InvariantExecutor Wrapper around any Executorproptest]. InvariantFailureMetrics 🔒 Tracks invariant failure counts during a campaign. InvariantFailures Stores invariant test failures and revert counts. InvariantFuzzTestResult The outcome of an invariant fuzz test InvariantMetrics Contains invariant metrics for a single fuzzed selector. InvariantProgressContext 🔒 InvariantTest 🔒 Contains invariant test data. InvariantTestData 🔒 Contains data collected during invariant test runs. InvariantTestRun 🔒 Contains data for an invariant test run. InvariantThroughputMetrics 🔒 Campaign-level throughput metrics for invariant progress reporting. RecordedCallSequence 🔒 Recorded call sequence used by corpus feedback and frontier recording. ReplayErrorResult SequenceShrink Shrinker for a call sequence failure.
Iterates sequence call sequence top down and removes calls one by one.
If the failure is still reproducible with removed call then moves to the next one.
If the failure is not reproducible then restore removed call and moves to next one. ShrinkCandidateKeys Shared key set for shrinkers that need to skip duplicate concrete replays. ShrinkRun Shared shrink attempt driver. ShrinkRunStats Attempt counters collected while trying shrink candidates. CheckSequenceFailureSite Concrete failure site observed while replaying a sequence through check_sequence FailureKey Identifies a single entry in the InvariantFailures InvariantFuzzError DEFAULT_DEPTH_FOR_INVARIANT_WORKER_CAP 🔒 Baseline depth used to preserve the previous default-depth worker heuristic. INVARIANT_FOCUS_WORKER_DIVISOR 🔒 Share of parallel workers reserved for selector focus mode. MAX_VIEW_CALLS_PER_TX 🔒 Maximum number of view calls made to harvest dictionary values after one invariant call. MIN_ESTIMATED_CALLS_PER_INVARIANT_WORKER 🔒 Minimum estimated handler calls assigned to each auto invariant worker. MIN_RUNS_PER_INVARIANT_WORKER 🔒 Minimum number of logical runs assigned to each auto invariant worker at the default invariant
depth. auto_invariant_worker_count 🔒 build_handler_failure_event 🔒 build_invariant_progress_json 🔒 Builds the machine-readable invariant progress payload emitted during a
campaign. call_after_invariant_function 🔒 Calls the afterInvariant() function on a contract.
Returns call result and if call succeeded.
The state after the call is not persisted. call_invariant_function 🔒 Calls the invariant function and returns call result and if succeeded. campaign_seed_and_corpus_seed_for_worker 🔒 check_sequence Checks if the given call sequence breaks the invariant. check_sequence_value Executes a call sequence and returns the optimization value (int256) from the invariant
function. Used during shrinking for optimization mode. collect_data 🔒 Collects data from call for fuzzing. However, it first verifies that the sender is not an EOA
before inserting it into the dictionary. Otherwise, we flood the dictionary with
randomly generated addresses. collect_view_values 🔒 Calls the view functions of targeted contracts that the successful call accessed (read or
written), and adds their decoded results to the fuzz dictionary, whole structs included. did_fail_on_assert Returns whether the current fuzz call should be treated as an assertion failure. execute_tx Executes an invariant replay fuzz call and returns the result. execute_tx_and_register_created Executes an invariant replay call on a validation executor and registers created targets. focused_campaign_seed_for_worker 🔒 focused_targeted_contracts 🔒 gas_report_samples_for_worker 🔒 handler_edge_fingerprint Edge-coverage fingerprint for a handler-side assertion call. Prefers a pre-merge
edges hash; falls back to keccak(target || selector) when edge coverage is disabled. handler_site_already_minimal True iff there is already a HandlerAssertionFailuresite no longer than
candidate_len. Used to skip inserting a not-strictly-shorter repro. invariant_focus_seed 🔒 invariant_focus_worker_count 🔒 invariant_focus_worker_index 🔒 invariant_run_depth 🔒 invariant_worker_collects_evm_cmp_log 🔒 invariant_worker_config 🔒 invariant_worker_count_with_threads 🔒 invariant_worker_runner 🔒 is_harvestable_view 🔒 Returns whether a function is a view whose result can be harvested without fuzzed inputs. max_invariant_workers_for_campaign 🔒 rate_per_sec 🔒 Converts a cumulative campaign total into an average per-second rate. record_new_invariant_failures 🔒 Bridges newly-recorded invariant breaks from failures.errors into the pulse
failure_metrics so the live progress stream reflects breaks as they happen.
Iterates in declaration order so the emitted “failure” events are deterministic. replay_error Replays and shrinks a call sequence, collecting logs and traces. replay_handler_failure_sequence Replays a handler-bug sequence and returns whether the anchor still asserts on the same
path. Rejects sequences with a pre-anchor assertion (would be a different bug). replay_run Replays a call sequence for collecting logs and traces.
Returns counterexample to be used when the call sequence is a failed scenario. round_rate_for_progress 🔒 should_continue_invariant_worker 🔒 shrink_sequence_by_removing Shared sequence shrinker. Tries to drop each call; predicate decides whether the candidate
should be accepted, rejected, or skipped without spending a replay attempt. snapshot_edge_fingerprint 🔒 Stable hash of the call’s edge coverage, taken before merge_edge_coverage
zeroes the buffer. Returns None when edge coverage is disabled.