Method go

tools/quick-fuzz.cpp:703–754

};

void ValueFuzzer::go() {
  assert(!gone);
  gone = true;

  const int NumIntParams = 1 + C.choose(MaxIntParams);
  auto *RetTy = Type::getIntNTy(Ctx, VG.getWidth());
  vector<Type *> ParamsTy, ParamsRealTy;
  for (int i = 0; i < NumIntParams; ++i) {
    auto *origTy = Type::getIntNTy(Ctx, VG.getWidth());
    auto *realTy =
        C.flip() ? (Type *)origTy : (Type *)PointerType::get(Ctx, 0);
    ParamsRealTy.push_back(origTy);
    ParamsTy.push_back(realTy);
  }
  auto *FTy = FunctionType::get(RetTy, ParamsTy, false);
  auto *F = Function::Create(FTy, GlobalValue::ExternalLinkage, 0, "f", &M);
  if (C.flip()) {
    F->addRetAttr(C.flip() ? Attribute::ZExt : Attribute::SExt);
  }
  if (C.choose(4) == 0)
    F->addRetAttr(Attribute::NoUndef);
  auto BB = BasicBlock::Create(Ctx, "", F);
  VG.setBB(BB);

  vector<Value *> PointerParams;
  int idx = 0;
  for (auto &arg : F->args()) {
    VG.addVal(&arg);
    if (arg.getType()->isPointerTy()) {
      PointerParams.push_back(&arg);
      VG.addArgTy(arg, ParamsRealTy[idx]);
    } else {
      if (C.flip()) {
        arg.addAttr(C.flip() ? Attribute::ZExt : Attribute::SExt);
      }
    }
    if (C.choose(4) == 0)
      arg.addAttr(Attribute::NoUndef);
    ++idx;
  }

  int num_insts = C.choose(MaxInsts);
  for (int i = 0; i < num_insts; ++i) {
    auto *v = VG.genInst();
    if (C.choose(4) == 0 && !PointerParams.empty()) {
      auto *p = PointerParams[C.choose(PointerParams.size())];
      new StoreInst(VG.adapt(v, VG.getArgTy(p)), p, BB);
    }
  }

  ReturnInst::Create(Ctx, VG.getVal(RetTy), BB);
}

class BBFuzzer : public Fuzzer {
  const int MaxBBs = 50;