Crate fidl_fuchsia_fuzzer
source ·Macros
Pattern that matches an unknown
Corpus member.Pattern that matches an unknown
Result_ member.Pattern that matches an unknown
TestOutput member.Pattern that matches an unknown
UpdateReason member.Structs
A Stream of incoming requests for ControllerProvider
A Stream of incoming requests for Controller
A Stream of incoming requests for CorpusReader
A Stream of incoming requests for CoverageDataCollector
A Stream of incoming requests for CoverageDataProvider
Encapsulates transferring a fuzzer inputs over a socket, e.g. between a host and device via
overnet.
Represents an instrumented target process under test.
A Stream of incoming requests for Manager
A Stream of incoming requests for Monitor
See
fuchsia.fuzzer.Controller/Configure.Details about an instrumented process.
A Stream of incoming requests for Registrar
A Stream of incoming requests for Registry
Corresponds to sanitizer enviroment variables.
See |Controller.GetStatus|.
A Stream of incoming requests for TargetAdapter
Enums
Provides a
Controller implementation.Provides the management interface for fuzzing.
See |Controller.GetCorpusWriter| and |Controller.GetCorpusReader|.
Receives a sequence of test inputs belonging to a fuzzer’s corpus.
Returns an error if the transfer fails.
Represents an instrumented target process or the code coverage it is sharing.
Collects VMOs used to share code coverage from instrumented target processes.
Provides the process handles and VMOs used to share code coverage to the fuzzing engine.
Entry point for users, e.g.
ffx fuzz, used to start and stop fuzzers. A fuzzer will be started
on the first call to |Connect| with a given URL. Closing the given |Controller| channel does
not stop the associated fuzzer. Instead, since fuzzing is meant to be long-running, clients
may drop the connection and re-|Connect| some time later.See |Status|. This protocol is used to push status from the |Controller| to callers.
Entry point for the fuzz_test_runner. It uses this protocol to transfer one end of a channel it
creates to the fuzz_manager. The other end is passed as a startup handle to the fuzzer component
itself, which provides |Controller|s on request.
Entry point for the fuzz-manager. It uses this protocol to wait for fuzz tests started within
the test runner framework to register a |ControllerProvider|, and to stop those fuzzers when no
additional fuzzing workflows remain to be performed.
Indicates the result of a long-running fuzzing workflow.
Maps test inputs to specific behaviors in the target code, e.g. by invoking APIs, making FIDL
calls. etc. The adapter includes the target-specific code often referred to as the “fuzz target
function”.
Represents types of fuzzer output.
Constants
Marker indicating the last message in a diagnostic output stream.
Command line flag requesting fuzzing to be performed.
Maximum length of a sanitizer options environment variable name.
Maximum length of a sanitizer options environment variable value.