MCPcopy Create free account

hub / github.com/MultiFuzz/MultiFuzz / functions

Functions613 in github.com/MultiFuzz/MultiFuzz

⨍ Functions 613◇ Types & classes 157
↓ 3 callersFunctionlog_cmplog_data
( vm: &mut Vm, cmplog: CmpLog2Ref, path: &std::path::Path, )
hail-fuzz/src/i2s/mod.rs:22
↓ 3 callersFunctionmaybe_activate
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:207
↓ 3 callersMethodmaybe_save
(&mut self, workdir: &std::path::Path)
hail-fuzz/src/queue.rs:150
↓ 3 callersMethodopen_reader
(&self, path: &Path)
hail-fuzz/src/debugging/replay.rs:314
↓ 3 callersFunctionrand_range
Generate a random range between `start..=end` with a maximum size of `max_size`.
hail-fuzz/src/utils.rs:97
↓ 3 callersFunctionrandom_bytes
Fill `buf` with random bytes.
hail-fuzz/src/utils.rs:44
↓ 3 callersMethodread
(&mut self, cpu: &mut Cpu)
icicle-cortexm/src/arm.rs:34
↓ 3 callersMethodrestore_local
(&mut self, vm: &mut Vm, snapshot: &Box<dyn Any>)
hail-fuzz/src/coverage.rs:214
↓ 3 callersFunctionsave_path_trace
(path: &std::path::Path, blocks: &Vec<TraceEntry>)
hail-fuzz/src/debugging/trace.rs:222
↓ 3 callersMethodsteps
Return the number of steps between the start and end of the counter.
hail-fuzz/src/i2s/analysis.rs:263
↓ 3 callersFunctionstop_timer
icicle-cortexm/fuzzware-native/timer.c:416
↓ 3 callersFunctionsync_timers
icicle-cortexm/fuzzware-native/timer.c:93
↓ 3 callersMethoduc_ptr
(&mut self)
icicle-cortexm/src/unicorn_api.rs:42
↓ 2 callersFunctionGET_CURR_SP_MODE_IS_PSP
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:66
↓ 2 callersMethodadd_item
(&mut self, item_to_add: &[u8], stride: u8)
hail-fuzz/src/dictionary.rs:49
↓ 2 callersMethodadd_to_global_metadata
(&mut self, id: InputId, state: &State)
hail-fuzz/src/queue.rs:218
↓ 2 callersFunctionall_zero
(arr: &[u8])
hail-fuzz/src/i2s/finder.rs:394
↓ 2 callersFunctionanalyse_call_parameters
(entry: &CmpCallData)
hail-fuzz/src/i2s/analysis.rs:67
↓ 2 callersFunctionanalyse_comparisons
(entry: &CmpInstData)
hail-fuzz/src/i2s/analysis.rs:5
↓ 2 callersMethodas_any
(&self)
hail-fuzz/src/coverage.rs:43
↓ 2 callersFunctioncalculate_energy
Calculates the energy to use for the current input.
hail-fuzz/src/main.rs:1081
↓ 2 callersFunctioncapture_comparisons
Capture all the comparisons discovered by executing the current input. Note: This function does not reset the fuzzer's state to the original snapshot
hail-fuzz/src/i2s/finder.rs:14
↓ 2 callersMethodchoose_random
(&self, rng: &mut R)
hail-fuzz/src/mutations.rs:174
↓ 2 callersFunctionclassify_counts
(counts: &mut [u64], strategy: BucketStrategy)
hail-fuzz/src/coverage.rs:230
↓ 2 callersMethodcompute_load_usage
( &mut self, cpu: &mut Cpu, code: &BlockTable, block: usize, )
hail-fuzz/src/load_resizer.rs:77
↓ 2 callersMethodcount
(&self)
hail-fuzz/src/mutations.rs:170
↓ 2 callersMethodcount_non_empty_streams
(&self)
hail-fuzz/src/input.rs:131
↓ 2 callersFunctioncount_parent_prefix
Returns a count of the number of bytes within each stream shared with the parent input.
hail-fuzz/src/utils.rs:217
↓ 2 callersMethoddebug_info
(&self)
icicle-cortexm/src/lib.rs:752
↓ 2 callersMethoddedup
(&mut self)
hail-fuzz/src/i2s/finder.rs:66
↓ 2 callersMethodexecute_with_limit
Runs the VM until it exits or executs `limit` number of instructions and update the current fuzzing state.
hail-fuzz/src/main.rs:663
↓ 2 callersMethodfinalize_stride
(&mut self, prev_stride: i64)
hail-fuzz/src/i2s/analysis.rs:144
↓ 2 callersMethodfind_match
(&mut self, target: &StreamData, operands: Operands)
hail-fuzz/src/i2s/finder.rs:260
↓ 2 callersMethodfind_prefix_match
Starting from the current offset, find the next location in `dst` where prefix matches either of the operands in, storing the other in `replacement`.
hail-fuzz/src/i2s/finder.rs:330
↓ 2 callersMethodforce_trigger_next_time_based_interrupt
Triggers the next time based interrupt to occur (if time-based interrupts are enabled).
icicle-cortexm/src/lib.rs:639
↓ 2 callersMethodget_extension_factor
(&mut self, key: StreamKey)
hail-fuzz/src/main.rs:884
↓ 2 callersFunctionget_global_ticker
icicle-cortexm/fuzzware-native/timer.c:314
↓ 2 callersFunctionget_group_prio
Armv7-M ARM B1.5.8
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:77
↓ 2 callersFunctionget_new_bits
Return the index of any bits within `new` not set in `existing`.
hail-fuzz/src/coverage.rs:90
↓ 2 callersFunctionget_non_empty_streams
Retrivies the address and size of all streams in `data` with an non-zero length.
hail-fuzz/src/utils.rs:163
↓ 2 callersFunctionget_num_enabled
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1339
↓ 2 callersMethodget_or_lift_block
Attempts to get the block at `target` from `code` or lifts it if it doesn't exist.
hail-fuzz/src/load_resizer.rs:246
↓ 2 callersFunctionget_stream_weights
Assign weights that control often each stream is mutated based on on the colorization rate. This avoids spending effort on mutating streams that have
hail-fuzz/src/utils.rs:174
↓ 2 callersFunctionget_timer_reload_val
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:46
↓ 2 callersMethodhavoc_bytes
( &self, rng: &mut R, dict: DictionaryRef, input: &mut Vec<u8>, key: S
hail-fuzz/src/havoc.rs:268
↓ 2 callersMethodinit
(workers: usize)
hail-fuzz/src/queue.rs:543
↓ 2 callersFunctioninit_coverage_array
Create a zero initialized coverage array on the heap (note: we do this instead of directly initializing the value [0; _], to avoid excess stack usage
hail-fuzz/src/coverage.rs:117
↓ 2 callersFunctioninit_workdir
(config: &Config)
hail-fuzz/src/config.rs:225
↓ 2 callersFunctioninsert_active_timer
icicle-cortexm/fuzzware-native/timer.c:154
↓ 2 callersFunctionis_arm_exception_return
(value: u32)
icicle-cortexm/src/lib.rs:758
↓ 2 callersFunctionis_bit_set
(cov: &[u64], bit: u32)
hail-fuzz/src/coverage.rs:351
↓ 2 callersMethodlift_block
(&mut self, cpu: &mut Cpu, ctx: u64, target: u64)
hail-fuzz/src/load_resizer.rs:273
↓ 2 callersFunctionload_json
(path: &std::path::Path)
hail-fuzz/src/utils.rs:155
↓ 2 callersMethodlog
( &mut self, fuzzer: &mut Fuzzer, stream: StreamKey, offset: usize, le
hail-fuzz/src/trim.rs:213
↓ 2 callersMethodmin_max
Gets the minimum and maximum value of the data.
hail-fuzz/src/i2s/analysis.rs:238
↓ 2 callersFunctionmodify_input
Performs dynamic modifications of `input` based on environment variables
hail-fuzz/src/debugging/mod.rs:79
↓ 2 callersMethodnew_bits
(&mut self, vm: &mut Vm)
hail-fuzz/src/coverage.rs:171
↓ 2 callersFunctionnth_enabled_irq_num
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1343
↓ 2 callersFunctionor_bits
(existing: &mut [u64], new: &[u64])
hail-fuzz/src/coverage.rs:108
↓ 2 callersFunctionparse_modification
Parses an insertion/replacement expression of the form: "<stream addr>,<stream offset>,<hex bytes>" e.g. 0x40000418,0,0a0b0c0d
hail-fuzz/src/debugging/mod.rs:139
↓ 2 callersFunctionpending_exception_can_be_activated
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:100
↓ 2 callersMethodpop_stack
Handles code associated with poping the stack frame after returning from an interrupt. Note: Currently most of the code is implemented by Fuzzware.
icicle-cortexm/src/lib.rs:602
↓ 2 callersFunctionprefix_match
Returns the number of prefix bytes shared between `a` and `b`.
hail-fuzz/src/i2s/finder.rs:439
↓ 2 callersMethodprint_crash_or_hang
( &self, vm: &mut Vm, target: &CortexmMultiStream, exit: VmExit, kind:
hail-fuzz/src/monitor.rs:351
↓ 2 callersFunctionprint_timer
icicle-cortexm/fuzzware-native/timer.c:27
↓ 2 callersMethodpush_stack
Handles code associated with pushing the stack frame associated with an interrupt entry. Note: Currently most of the code is implemented by Fuzzware.
icicle-cortexm/src/lib.rs:595
↓ 2 callersFunctionrand_pow2
(mut rng: R, log2_max: u32)
hail-fuzz/src/utils.rs:212
↓ 2 callersFunctionrandom_subslice
(rng: &mut R, slice: &'a [u8])
hail-fuzz/src/mutations.rs:298
↓ 2 callersFunctionread_within
( tar_path: &Path, file_path: &Path, compression: &Compression, )
hail-fuzz/src/debugging/replay.rs:438
↓ 2 callersFunctionremove_active_timer
icicle-cortexm/fuzzware-native/timer.c:183
↓ 2 callersMethodrequired_bytes
Return the amount of bytes required for the load operation (Note: we do not allow the starting address of the load to be adjusted, and require the siz
hail-fuzz/src/load_resizer.rs:534
↓ 2 callersMethodrequired_bytes
Returns the number of bytes required to store the range.
hail-fuzz/src/i2s/analysis.rs:288
↓ 2 callersMethodrestore_cursors
(&mut self, snapshot: &Vec<(u64, u32)>)
hail-fuzz/src/input.rs:234
↓ 2 callersFunctionrun
( mut fuzz_config: FuzzConfig, unit_test_dir: &Path, interrupt_flag: std::sync::Arc<std::sync::ato
hail-fuzz/src/p2im_unit_tests.rs:24
↓ 2 callersMethodrun
(fuzzer: &mut Fuzzer, stats: &mut monitor::LocalStats)
hail-fuzz/src/main.rs:976
↓ 2 callersFunctionset_prigroup
* Sets the prigroup fields from a given prigroup value. * prigroup itself is a shift amount which determines * group prio and sub prio masks. */
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:384
↓ 2 callersFunctionset_prio
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:390
↓ 2 callersFunctionset_timer_reload_val
icicle-cortexm/fuzzware-native/timer.c:260
↓ 2 callersMethodsnapshot_cursors
(&self)
hail-fuzz/src/input.rs:230
↓ 2 callersMethodsnapshot_local
(&mut self, vm: &mut Vm)
hail-fuzz/src/coverage.rs:209
↓ 2 callersFunctionsort_timer_back
icicle-cortexm/fuzzware-native/timer.c:201
↓ 2 callersFunctionsplice_input
(rng: &mut R, input: &mut Vec<u8>, offset: usize, other: &[u8])
hail-fuzz/src/mutations.rs:304
↓ 2 callersMethodstart_stride
(&mut self, prev: i64, next: i64)
hail-fuzz/src/i2s/analysis.rs:157
↓ 2 callersMethodsymbolize_addr
(&mut self, _cpu: &mut Cpu, addr: u64)
icicle-cortexm/src/lib.rs:738
↓ 2 callersMethodtry_exec
( &mut self, fuzzer: &mut Fuzzer, stats: &mut crate::monitor::LocalStats, )
hail-fuzz/src/i2s/replacement.rs:328
↓ 2 callersMethodupdate
(&mut self, fuzzer: &Fuzzer)
hail-fuzz/src/monitor.rs:93
↓ 2 callersMethodupdate
(&mut self, prev: i64, next: i64)
hail-fuzz/src/i2s/analysis.rs:114
↓ 2 callersMethodupdate_input_metadata
(&mut self, id: InputId)
hail-fuzz/src/main.rs:819
↓ 2 callersFunctionvalidate_last_exec
(fuzzer: &mut crate::Fuzzer, exit: crate::VmExit)
hail-fuzz/src/debugging/mod.rs:11
↓ 2 callersMethodwas_hang
(&self)
hail-fuzz/src/main.rs:393
↓ 2 callersMethodweight
Assigns a weight to the input which is used to determine which of the new inputs we should try fuzzing first.
hail-fuzz/src/queue.rs:408
↓ 1 callersFunctionExceptionReturn
B1.5.8
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:876
↓ 1 callersFunctionPopStack
Armv7-M ARM B1.5.8
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:746
↓ 1 callersFunctionPushStack
B1.5.6
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:794
↓ 1 callersFunctionadd_arm_extras
Most of this should probably be implemented as part of the SLEIGH specification instead.
icicle-cortexm/src/arm.rs:53
↓ 1 callersMethodadd_bit_use
Tracks a usage of `bit` as part of the expression at `dst`.
hail-fuzz/src/load_resizer.rs:314
↓ 1 callersMethodadd_crash_or_hang
(&self, key: String, kind: CrashKind)
hail-fuzz/src/queue.rs:618
↓ 1 callersFunctionadd_ctrlc_handler
()
hail-fuzz/src/config.rs:264
↓ 1 callersMethodadd_data
(&mut self, data: D)
hail-fuzz/src/queue.rs:93
↓ 1 callersMethodadd_extract_model
(&mut self, pc: u64, min_bit: u8, max_bit: u8)
icicle-cortexm/src/mmio.rs:76
← previousnext →101–200 of 613, ranked by callers