MCPcopy Create free account

hub / github.com/MultiFuzz/MultiFuzz / functions

Functions613 in github.com/MultiFuzz/MultiFuzz

⨍ Functions 613◇ Types & classes 157
↓ 1 callersMethodhavoc_v1
(&mut self, fuzzer: &mut Fuzzer)
hail-fuzz/src/havoc.rs:117
↓ 1 callersMethodhit_replacement_limit
Checks if we have hit the replacement limit for the current stream/comparison.
hail-fuzz/src/i2s/replacement.rs:309
↓ 1 callersFunctionhook_nvic_mmio_write
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:411
↓ 1 callersFunctionhook_sysctl_mmio_write
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:665
↓ 1 callersFunctionhook_syst_mmio_write
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_systick.c:49
↓ 1 callersFunctioninit
icicle-cortexm/fuzzware-native/native_hooks.c:83
↓ 1 callersMethodinit
(&mut self, cpu: &mut Cpu)
icicle-cortexm/src/lib.rs:575
↓ 1 callersFunctioninit_nvic
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1240
↓ 1 callersFunctioninit_systick
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_systick.c:150
↓ 1 callersFunctioninterrupt_trigger_discard_snapshot
icicle-cortexm/fuzzware-native/interrupt_triggers.c:188
↓ 1 callersFunctioninterrupt_trigger_restore_snapshot
icicle-cortexm/fuzzware-native/interrupt_triggers.c:184
↓ 1 callersFunctioninterrupt_trigger_take_snapshot
icicle-cortexm/fuzzware-native/interrupt_triggers.c:177
↓ 1 callersFunctioninterrupt_trigger_tick_block_hook
icicle-cortexm/fuzzware-native/interrupt_triggers.c:24
↓ 1 callersFunctioninterrupt_trigger_timer_cb
icicle-cortexm/fuzzware-native/interrupt_triggers.c:130
↓ 1 callersMethodirq
(&self)
icicle-cortexm/src/config.rs:275
↓ 1 callersMethodis_extension
(&self)
hail-fuzz/src/main.rs:928
↓ 1 callersMethodis_favored
(&self, id: usize)
hail-fuzz/src/queue.rs:144
↓ 1 callersMethodis_mapped
(&self, start: u64, end: u64)
icicle-cortexm/src/config.rs:246
↓ 1 callersMethodis_worker_instance
Returns whether the fuzzing instance with this reference corresponds any instance except the main instance.
hail-fuzz/src/queue.rs:602
↓ 1 callersMethodlength_extension_prob
Computes the ratio to use for length extension compared to havoc style mutations for this input.
hail-fuzz/src/queue.rs:309
↓ 1 callersMethodlist_files
(&self)
hail-fuzz/src/debugging/replay.rs:356
↓ 1 callersMethodlog
(&mut self, fuzzer: &Fuzzer)
hail-fuzz/src/monitor.rs:112
↓ 1 callersFunctionlog2_max_extensions
Determine the maximum number of length extensions to apply to try.
hail-fuzz/src/extension.rs:395
↓ 1 callersFunctionlog2_max_mutations
Determine the maximum number of mutations to try. This number increases the longer it takes to find new inputs. @todo: these ranges were selected to
hail-fuzz/src/havoc.rs:184
↓ 1 callersFunctionlog_attempted_replacements
( replacements: &[Replacement], path: &std::path::Path, )
hail-fuzz/src/i2s/replacement.rs:438
↓ 1 callersFunctionmap_uc_to_varnodes
Returns a mapping from Unicorn Register IDs to Icicle varnodes. This is needed for compatability with the C code in Fuzzware.
icicle-cortexm/src/arm.rs:282
↓ 1 callersMethodmark_as_temporary
(&mut self, var: pcode::VarId)
hail-fuzz/src/load_resizer.rs:49
↓ 1 callersMethodmask_entry
(self, env: &mut FuzzwareEnvironment, cpu: &mut Cpu)
icicle-cortexm/src/lib.rs:770
↓ 1 callersMethodmask_return
(self, env: &mut FuzzwareEnvironment, cpu: &mut Cpu)
icicle-cortexm/src/lib.rs:789
↓ 1 callersMethodmatches_context
(&self, pc: u64, mem_addr: u64)
icicle-cortexm/src/mmio.rs:12
↓ 1 callersFunctionmax_mutations
(fuzzer: &Fuzzer)
hail-fuzz/src/havoc.rs:197
↓ 1 callersMethodmaybe_sync
(&mut self, fuzzer: &Fuzzer)
hail-fuzz/src/monitor.rs:219
↓ 1 callersMethodmerge
(&mut self, fork: &EvalState)
hail-fuzz/src/load_resizer.rs:439
↓ 1 callersMethodmerge
(&mut self, vm: &mut Vm)
hail-fuzz/src/coverage.rs:184
↓ 1 callersMethodmin_alignment
Returns the minimum alignment of the stream, given the reads we have seen for this stream.
hail-fuzz/src/input.rs:50
↓ 1 callersFunctionmulti_stream_from_bytes_v0
(buf: &[u8])
hail-fuzz/src/input.rs:288
↓ 1 callersMethodnew_inputs
(&self)
hail-fuzz/src/queue.rs:450
↓ 1 callersMethodnext_bytes
(&mut self, size: usize)
icicle-cortexm/src/mmio.rs:209
↓ 1 callersMethodnext_bytes
(&mut self, addr: StreamKey, size: usize)
hail-fuzz/src/input.rs:111
↓ 1 callersMethodnext_input
(&mut self, corpus: &CorpusStore<MultiStream>)
hail-fuzz/src/queue.rs:456
↓ 1 callersMethodnext_range
(&mut self)
hail-fuzz/src/i2s/colorization.rs:51
↓ 1 callersMethodnext_replacement
(&mut self, fuzzer: &Fuzzer)
hail-fuzz/src/i2s/replacement.rs:234
↓ 1 callersFunctionnvic_block_hook
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1107
↓ 1 callersFunctionnvic_discard_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1236
↓ 1 callersFunctionnvic_restore_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1230
↓ 1 callersFunctionnvic_take_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:1219
↓ 1 callersFunctionparse_duration_str
(name: &str)
hail-fuzz/src/utils.rs:12
↓ 1 callersFunctionparse_groundtruth_csv
( path: std::path::PathBuf, )
hail-fuzz/src/p2im_unit_tests.rs:364
↓ 1 callersFunctionparse_trim
Parses a trim expression of the form: "<stream addr>,<stream offset>,<size>"
hail-fuzz/src/debugging/mod.rs:123
↓ 1 callersMethodprefix_match
(&mut self, prefix: &[u8], size: usize)
hail-fuzz/src/i2s/finder.rs:383
↓ 1 callersMethodprepare_new_input
(&mut self, fuzzer: &mut Fuzzer)
hail-fuzz/src/extension.rs:175
↓ 1 callersMethodprint_alloc_failure
(&self, layout: std::alloc::Layout)
hail-fuzz/src/debug_alloc.rs:27
↓ 1 callersFunctionpush_with_resize
Pushes the resized version of `stmt` to `block`.
hail-fuzz/src/load_resizer.rs:210
↓ 1 callersMethodrandom
Returns a random input from the corpus.
hail-fuzz/src/queue.rs:119
↓ 1 callersFunctionrandom_input
Generate a completely random input
hail-fuzz/src/mutations.rs:15
↓ 1 callersMethodrandom_replace
(&mut self, fuzzer: &mut Fuzzer)
hail-fuzz/src/i2s/replacement.rs:60
↓ 1 callersFunctionrandomize_input
Replace all bytes in the slice different values.
hail-fuzz/src/utils.rs:51
↓ 1 callersMethodrandomize_trim_order
(&mut self, rng: &mut R)
hail-fuzz/src/trim.rs:139
↓ 1 callersMethodread
(&mut self, addr: u64, buf: &mut [u8])
hail-fuzz/src/input.rs:329
↓ 1 callersMethodread
(&self)
hail-fuzz/src/debugging/replay.rs:395
↓ 1 callersMethodread_as
Returns whether the stream has been read as a certain sized value.
hail-fuzz/src/input.rs:45
↓ 1 callersMethodread_child
(&self, file: &Path)
hail-fuzz/src/debugging/replay.rs:417
↓ 1 callersMethodrecompute_input_prioritization
Recomputes the inputs in the corpus that should be favored.
hail-fuzz/src/queue.rs:124
↓ 1 callersFunctionreg_read
(ctx: *mut c_void, regid: c_int, value: *mut c_void)
icicle-cortexm/src/unicorn_api.rs:154
↓ 1 callersFunctionreg_write
(ctx: *mut c_void, regid: c_int, value: *const c_void)
icicle-cortexm/src/unicorn_api.rs:202
↓ 1 callersFunctionregister_cstr_printer
(vm: &mut Vm, addr: u64, reg: &str)
hail-fuzz/src/debugging/check.rs:561
↓ 1 callersMethodrelative_path
(&self, path: &Path)
icicle-cortexm/src/config.rs:134
↓ 1 callersFunctionreload_fuzz_consumption_timer
icicle-cortexm/fuzzware-native/native_hooks.c:50
↓ 1 callersMethodremove_current
Update the cursor assuming that the current location has been removed.
hail-fuzz/src/trim.rs:181
↓ 1 callersFunctionremove_fuzzable_interrupt_no
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_nvic.c:330
↓ 1 callersMethodremove_global_metadata
(&mut self, id: InputId)
hail-fuzz/src/queue.rs:241
↓ 1 callersMethodreplace_input
Replace an input in the input corpus with a new version.
hail-fuzz/src/queue.rs:197
↓ 1 callersFunctionreplay
(mut config: Config, path: &str)
hail-fuzz/src/debugging/replay.rs:93
↓ 1 callersFunctionreplay_bench
(mut vm: Vm, mut target: CortexmMultiStream, trials: u64)
hail-fuzz/src/debugging/replay.rs:144
↓ 1 callersFunctionreplay_trace
(mut vm: Vm, mut target: CortexmMultiStream)
hail-fuzz/src/debugging/replay.rs:217
↓ 1 callersMethodrequired_bits
(&self)
hail-fuzz/src/load_resizer.rs:543
↓ 1 callersMethodreset
(&mut self)
hail-fuzz/src/p2im_unit_tests.rs:284
↓ 1 callersMethodreset
(&mut self)
hail-fuzz/src/load_resizer.rs:299
↓ 1 callersMethodresize_loads
Applies resize operations to all loads where upper bits are unused. Note: this approach is unable to remove unused low bits from the operation, to all
hail-fuzz/src/load_resizer.rs:124
↓ 1 callersFunctionresize_used_bits
Removes upper bits from `a` and `b` for operations with partial constants. Handles cases like: ```pcode value:4 = load(value_addr) mask:1 = load(mas
hail-fuzz/src/load_resizer.rs:464
↓ 1 callersMethodrun
(fuzzer: &mut Fuzzer, stats: &mut LocalStats)
hail-fuzz/src/trim.rs:15
↓ 1 callersFunctionrun_once
(fuzzer: &mut Fuzzer)
hail-fuzz/src/debugging/stage.rs:43
↓ 1 callersFunctionrun_stage
(config: Config, input_path: &Path, stage: Stage)
hail-fuzz/src/debugging/stage.rs:10
↓ 1 callersMethodsave
( &mut self, state: &State, vm: &mut Vm, target: &CortexmMultiStream,
hail-fuzz/src/monitor.rs:305
↓ 1 callersFunctionsave_block_coverage
(mut config: Config, mode: SaveMode)
hail-fuzz/src/debugging/replay.rs:40
↓ 1 callersFunctionsave_metadata
(fuzzer: &mut Fuzzer, state: &MultiStreamExtendStage)
hail-fuzz/src/extension.rs:373
↓ 1 callersFunctionsave_mmio_reads
(path: &std::path::Path, reads: &Vec<(u64, u64, u8)>)
hail-fuzz/src/debugging/trace.rs:233
↓ 1 callersMethodsave_to_file
(&self, path: &std::path::Path)
hail-fuzz/src/i2s/finder.rs:82
↓ 1 callersMethodsave_trace
(&self, vm: &mut icicle_vm::Vm, path: &std::path::Path, symbolize: bool)
hail-fuzz/src/debugging/trace.rs:202
↓ 1 callersMethodselect_random
(&self, rng: &mut R)
hail-fuzz/src/i2s/finder.rs:135
↓ 1 callersFunctionselect_random_non_empty_stream
( rng: &mut R, data: &'a MultiStream, )
hail-fuzz/src/utils.rs:136
↓ 1 callersMethodserialize
(&self, _: &mut Vm, out: &mut String)
hail-fuzz/src/coverage.rs:195
↓ 1 callersFunctionserialize_firmware_config_yml
Manually serializes a firmware configuration to allow for more human readable formatting. Note: This does not currently support all configuration opt
icicle-cortexm/src/genconfig.rs:308
↓ 1 callersMethodset_debug_info
(&mut self, path: PathBuf)
icicle-cortexm/src/lib.rs:606
↓ 1 callersFunctionset_timer_countdown
(ctx: *mut c_void, value: u64)
icicle-cortexm/src/unicorn_api.rs:345
↓ 1 callersMethodskip_current
Update the cursor assuming that the current location has been removed.
hail-fuzz/src/trim.rs:188
↓ 1 callersMethodsync
(&mut self, stats: LocalStats)
hail-fuzz/src/monitor.rs:179
↓ 1 callersFunctionsystick_discard_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_systick.c:146
↓ 1 callersFunctionsystick_restore_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_systick.c:142
↓ 1 callersFunctionsystick_take_snapshot
icicle-cortexm/fuzzware-native/core_peripherals/cortexm_systick.c:135
← previousnext →301–400 of 613, ranked by callers