Macros§
- Pattern that matches an unknown
Corpusmember. - Pattern that matches an unknown
Datamember. - Pattern that matches an unknown
Result_member. - Pattern that matches an unknown
TestOutputmember. - Pattern that matches an unknown
UpdateReasonmember.
Structs§
- Encapsulates the result of a long-running fuzzing workflow and optionally the input that caused it, depending on the workflow.
- A Stream of incoming requests for fuchsia.fuzzer/ControllerProvider.
- A Stream of incoming requests for fuchsia.fuzzer/Controller.
- A Stream of incoming requests for fuchsia.fuzzer/CorpusReader.
- Represents an instrumented target process or the code coverage it is sharing.
- A Stream of incoming requests for fuchsia.fuzzer/CoverageDataCollector.
- A Stream of incoming requests for fuchsia.fuzzer/CoverageDataProvider.
- Encapsulation of a fuzzer input transferred over a socket, e.g. between a host and device via overnet.
- Represents an instrumented target process under test.
- A Stream of incoming requests for fuchsia.fuzzer/Manager.
- A Stream of incoming requests for fuchsia.fuzzer/Monitor.
- See
fuchsia.fuzzer.Controller/Configure. - Specifies how a fuzzing engine should configure output streams.
- Details about an instrumented process.
- A Stream of incoming requests for fuchsia.fuzzer/Registrar.
- A Stream of incoming requests for fuchsia.fuzzer/Registry.
- Corresponds to sanitizer enviroment variables.
- See
Controller.GetStatus. - A Stream of incoming requests for fuchsia.fuzzer/TargetAdapter.
Enums§
- Provides a
Controllerimplementation. - Provides the management interface for fuzzing.
- See |Controller.GetCorpusWriter| and |Controller.GetCorpusReader|.
- Sends a sequence of test inputs belonging to a fuzzer’s corpus.
- Collects VMOs used to share code coverage from instrumented target processes.
- Provides the process Handles and VMOs used to share code coverage to the fuzzing engine.
- Entry point for users, e.g.
ffx fuzz, used to start and stop fuzzers. A fuzzer will be started on the first call toConnectwith a given URL. Closing the givenControllerchannel does not stop the associated fuzzer. Instead, since fuzzing is meant to be long-running, clients may drop the connection and re-Connectsome time later. - See
Status. This protocol is used to push status from theControllerto callers. - Entry point for the
fuzz_test_runner. It uses this protocol to transfer one end of a channel it creates to thefuzz_manager. The other end is passed as a startup handle to the fuzzer component itself, which is used to provideControllers on request. - Entry point for the
fuzz_manager. It uses this protocol to wait for fuzz tests started within the test runner framework to register aControllerProvider, and to stop those fuzzers upon request. - Indicates the result of a long-running fuzzing workflow.
- Maps test inputs to specific behaviors in the target code, e.g. by invoking APIs, making FIDL calls. etc. The adapter includes the target-specific code often referred to as the “fuzz target function”.
- Represents types of fuzzer output.
- See
Controller.Monitor. Used to indicate why an update was sent.
Constants§
- Marker indicating the last message in a diagnostic output stream.
- Command line flag requesting fuzzing to be performed.
- Maximum length of a vector of CoverageData structs.
- The maximum number of processes for which stats will be returned via
Status. - Maximum length of a sanitizer options environment variable name.
- Maximum length of a sanitizer options environment variable value.