Function find_exploitable_func

src/program/infer/dynamic_infer.rs:208–230

Find the api functions that contains an fuzzable integeral parameter.

(static_constraint: &APIConstraints)

/// Find the api functions that contains an fuzzable integeral parameter.
fn find_exploitable_func(static_constraint: &APIConstraints) -> Result<Vec<(String, Vec<usize>)>> {
    let mut funcs = Vec::new();
    for gadget in get_func_gadgets() {
        let api_name = gadget.get_func_name();
        let mut int_pos = gadget.get_integer_params_pos();
        // remove the param that constrainted by ArrayLen and ArrayIndex and FileDesc
        if let Some(constraints) = static_constraint.get(api_name) {
            for constraint in constraints {
                if let Some((_, arg_pos)) = constraint.get_arg_tuple() {
                    int_pos.retain(|x| x != arg_pos);
                }
                if let Constraint::FileDesc(arg_pos) = constraint {
                    int_pos.retain(|x| x != arg_pos);
                }
            }
        }
        if int_pos.is_empty() {
            continue;
        }
        funcs.push((api_name.to_string(), int_pos));
    }
    Ok(funcs)
}

/// Ranked API coverage for API in each programs.
type APICovRank = HashMap<String, Vec<(f32, usize)>>;