Method transform_to_fuzzer

src/program/transform.rs:111–135

Given the sequence numbers of fuzzable arguments, transform those arguments to receive fuzzer engine's bytes. The transformation satisfies th passed constraints. nths: the sequence numbers of the arguments you want to transform.

(
        &mut self,
        constraints: &APIConstraints,
        nths: Vec<usize>,
    )

    /// The transformation satisfies th passed constraints.
    /// nths: the sequence numbers of the arguments you want to transform.
    pub fn transform_to_fuzzer(
        &mut self,
        constraints: &APIConstraints,
        nths: Vec<usize>,
    ) -> Result<()> {
        log::debug!("Change {:?} to fuzzer, {nths:?}", self.src_file.file_name());
        // change to fuzzer function declaration
        let fuzzer_ty = "int";
        let fuzzer_name = "LLVMFuzzerTestOneInput".to_string();

        let fuzzer_params = "const uint8_t* f_data, size_t f_size";
        self.change_fd_to_fuzzer(fuzzer_ty, &fuzzer_name, fuzzer_params)?;
        self.change_input_data_fuzzable()?;

        // change fuzzable args of calls to receive fuzzer input
        self.change_calls_to_fuzzer(constraints, nths)?;
        // ignore to change vardecl, because it is useless as all fuzzable args are already changed.

        self.write_fuzzer_seeds()?;
        self.add_fd_sanitizer()?;
        self.handle_file_constraint("data", "size")?;
        self.add_fuzzer_size_constraint("f_size")?;

        Ok(())
    }

    pub fn transform_with_execution_check(
        &mut self,