Macros

Pattern that matches an unknown Corpus member.
Pattern that matches an unknown Result_ member.
Pattern that matches an unknown TestOutput member.
Pattern that matches an unknown UpdateReason member.

Structs

A Stream of incoming requests for ControllerProvider
A Stream of incoming requests for Controller
A Stream of incoming requests for CorpusReader
A Stream of incoming requests for CoverageDataCollector
A Stream of incoming requests for CoverageDataProvider
Encapsulates transferring a fuzzer inputs over a socket, e.g. between a host and device via overnet.
Represents an instrumented target process under test.
A Stream of incoming requests for Manager
A Stream of incoming requests for Monitor
See fuchsia.fuzzer.Controller/Configure.
Details about an instrumented process.
A Stream of incoming requests for Registrar
A Stream of incoming requests for Registry
Corresponds to sanitizer enviroment variables.
See |Controller.GetStatus|.
A Stream of incoming requests for TargetAdapter

Enums

Provides a Controller implementation.
Provides the management interface for fuzzing.
See |Controller.GetCorpusWriter| and |Controller.GetCorpusReader|.
Receives a sequence of test inputs belonging to a fuzzer’s corpus. Returns an error if the transfer fails.
Represents an instrumented target process or the code coverage it is sharing.
Collects VMOs used to share code coverage from instrumented target processes.
Provides the process handles and VMOs used to share code coverage to the fuzzing engine.
Entry point for users, e.g. ffx fuzz, used to start and stop fuzzers. A fuzzer will be started on the first call to |Connect| with a given URL. Closing the given |Controller| channel does not stop the associated fuzzer. Instead, since fuzzing is meant to be long-running, clients may drop the connection and re-|Connect| some time later.
See |Status|. This protocol is used to push status from the |Controller| to callers.
Entry point for the fuzz_test_runner. It uses this protocol to transfer one end of a channel it creates to the fuzz_manager. The other end is passed as a startup handle to the fuzzer component itself, which provides |Controller|s on request.
Entry point for the fuzz-manager. It uses this protocol to wait for fuzz tests started within the test runner framework to register a |ControllerProvider|, and to stop those fuzzers when no additional fuzzing workflows remain to be performed.
Indicates the result of a long-running fuzzing workflow.
Maps test inputs to specific behaviors in the target code, e.g. by invoking APIs, making FIDL calls. etc. The adapter includes the target-specific code often referred to as the “fuzz target function”.
Represents types of fuzzer output.

Constants

Marker indicating the last message in a diagnostic output stream.
Command line flag requesting fuzzing to be performed.
Maximum length of a sanitizer options environment variable name.
Maximum length of a sanitizer options environment variable value.

Traits

Type Definitions