Module showmap 

AFL-afl-showmap-style corpus replay.

Replays a persisted corpus through a fresh executor and emits one text file per trial (or per corpus entry). Each line has the form <id>:<count>:

• EVM IDs use the deterministic (bytecode_hash, pc) derived from the line-coverage HitMap so that IDs are stable across forge invocations and meaningful for cross-approach analysis. Format: evm_<bytecode_hash[:16]>_<pc:04x>.
• Sancov IDs use the deterministic guard index from the sancov bitmap: sancov_0x<index:04x>.

Counts are raw saturating-summed hitcounts across the replayed corpus.

Output is consumable by tools like riesentoaster/differential-coverage.

Re-exports

use crate::executors::Executor; 🔒

use crate::executors::corpus::DynamicTargetCtx; 🔒

use crate::executors::corpus::StatelessReplayTarget; 🔒

use crate::executors::corpus::WorkerCorpus; 🔒

use crate::executors::corpus::register_replay_created; 🔒

use crate::executors::corpus::rollback_replay_created; 🔒

use crate::executors::corpus_io::read_corpus_tree; 🔒

use crate::executors::invariant::call_after_invariant_function; 🔒

use crate::executors::invariant::call_invariant_function; 🔒

use crate::executors::invariant::did_fail_on_assert; 🔒

use crate::executors::invariant::execute_tx; 🔒

use crate::executors::invariant::snapshot_edge_fingerprint; 🔒

use crate::executors::should_ignore_revert; 🔒

use crate::inspectors::EdgeIndexMap; 🔒

use alloy_dyn_abi::JsonAbiExt; 🔒

use alloy_json_abi::Function; 🔒

use alloy_primitives::Address; 🔒

use alloy_primitives::B256; 🔒

use alloy_primitives::Selector; 🔒

use alloy_primitives::hex; 🔒

use alloy_primitives::hex; 🔒

use alloy_primitives::keccak256; 🔒

use alloy_primitives::map::HashMap; 🔒

use eyre::Result; 🔒

use foundry_config::FuzzCorpusConfig; 🔒

use foundry_evm_core::constants::MAGIC_ASSUME; 🔒

use foundry_evm_core::evm::FoundryEvmNetwork; 🔒

use foundry_evm_coverage::HitMaps; 🔒

use foundry_evm_fuzz::BasicTxDetails; 🔒

use foundry_evm_fuzz::invariant::FuzzRunIdentifiedContracts; 🔒

use std::borrow::Cow; 🔒

use std::cmp::Ordering; 🔒

use std::collections::BTreeSet; 🔒

use std::fmt; 🔒

use std::fs::File; 🔒

use std::io::BufWriter; 🔒

use std::io::Write; 🔒

use std::path::Path; 🔒

use std::path::PathBuf; 🔒

Structs

InvariantReplayOptions

Invariant replay settings that affect when terminal checks run.

MinimizationReplayInput

ReplayObservation

Facts observed while replaying one candidate for corpus minimization.

ShowmapOpts

Per-replay options.

ShowmapReplayTarget

Test target metadata needed to replay corpus entries.

ShowmapStats

Stats returned from a single trial replay.

Enums

ReplayFailure

A structured identity for a failure observed during corpus replay.

ShowmapDomain

Which coverage bitmap(s) to dump.

Constants

MAX_REPORTED_REPLAY_FAILURES 🔒

Functions

accumulate_evm 🔒

Saturating-add per-(bytecode, pc) hits from a HitMaps snapshot into dst.

accumulate_sancov 🔒

Saturating-add src (u8 raw counts) into dst (u64 aggregated counts).

all_invariants_failed 🔒

broken_after_invariant 🔒

first_broken_invariant 🔒

fuzz_replay_call_succeeded 🔒

has_replay_invariant_failure 🔒

invariant_handlers_succeeded 🔒

Whether the just-executed handler call passed the campaign’s success gate.

invariant_replay_failures 🔒

Returns replay failures produced directly by a handler call, mirroring the campaign: assertions are keyed by handler site, while a non-assertion revert breaks every invariant configured with fail_on_revert.

newly_broken_invariants 🔒

replay_corpus_to_showmap

Replay every corpus entry under corpus_dir and emit showmap files.

replay_failure_rank 🔒

replay_failure_report 🔒

replay_sequence_for_minimization

Replays one candidate input and returns coverage/failure facts for minimizers.

should_check_invariant 🔒

Whether the invariant predicate should be evaluated after the accepted-th committed (non-vm.assume) call.

write_evm 🔒

Each EVM ID is evm_<bytecode_hash[:16hex]>_<pc:04x>. The 16-hex prefix (64 bits) of the keccak256 bytecode hash makes IDs deterministic across processes while keeping line lengths short.

write_sancov 🔒

write_showmap_file 🔒

Write a single showmap file. Returns 1 if a file was written, 0 if skipped (no nonzero entries).

Type Aliases

EvmShowmap 🔒