Function collect_fuzzable_integer_args

src/program/transform.rs:1330–1361

(
    call_name: &str,
    call: &Node,
    n_call: usize,
    constraints: &APIConstraints,
    visitor: &Visitor,
)

}

fn collect_fuzzable_integer_args(
    call_name: &str,
    call: &Node,
    n_call: usize,
    constraints: &APIConstraints,
    visitor: &Visitor,
) -> Vec<FuzzVariant> {
    // get the positions of integer (scalar) type parameters of this API call.
    let integeral_pos = get_func_gadget(call_name).unwrap().get_integer_params_pos();
    // filter out the positions inferred with constraints.
    let integeral_pos: Vec<&usize> = integeral_pos
        .iter()
        .filter(|x| !filter_constrained_integer_args(constraints, call_name, x))
        .collect();
    let mut fuzz_args = Vec::new();
    for arg_pos in integeral_pos {
        let arg = get_nth_arg(call, *arg_pos).unwrap();
        if let Clang::CXXDefaultArgExpr = &arg.kind {
            continue;
        }
        if arg.is_macro_expansion() {
            continue;
        }
        if is_ret_by_call(call_name, *arg_pos, visitor) || !is_arg_fuzzable(arg, visitor) {
            continue;
        }
        // read from file, needn't transform
        let variant = FuzzVariant::new(call_name.to_string(), call.clone(), n_call, *arg_pos, None);
        fuzz_args.push(variant);
    }
    fuzz_args
}

impl Visitor {
    /// Analyze the AST of the program. Collect the API calls that contained the fuzzable arguments.