Method next_replacement

hail-fuzz/src/i2s/replacement.rs:234–306

(&mut self, fuzzer: &Fuzzer)

    }

    fn next_replacement(&mut self, fuzzer: &Fuzzer) -> Option<()> {
        loop {
            if self.cursor.stream >= self.base_input.streams.len() {
                return None;
            }

            let (stream_key, dst) =
                fuzzer.state.input.streams.iter().nth(self.cursor.stream).unwrap();

            if crate::utils::is_interrupt_stream(*stream_key) {
                self.cursor.stream += 1;
            }

            let max_len = self
                .parent_prefix
                .get(stream_key)
                .map_or(fuzzer.features.max_i2s_bytes, |prefix| dst.bytes.len() - *prefix);
            self.cursor.finder.offset =
                self.cursor.finder.offset.max(dst.bytes.len().saturating_sub(max_len));

            loop {
                let found = match self.comparisons.get(self.cursor.cmp) {
                    Some((addr, operands)) => match self.cursor.finder.find_match(dst, operands) {
                        true => Some(addr),
                        false => None,
                    },
                    None => {
                        self.cursor.cmp.array += 1;
                        if self.cursor.cmp.array > 4 {
                            break;
                        }
                        self.cursor.cmp.offset = 0;
                        continue;
                    }
                };

                if let Some(addr) = found {
                    if self.hit_replacement_limit(&dst.bytes) {
                        self.cursor.finder.offset += 1;
                        continue;
                    }

                    let offset = self.cursor.finder.offset;
                    self.cursor.finder.offset += 1;

                    self.replacement.cmp_addr = addr;
                    self.replacement.cmp_array = self.cursor.cmp.array;
                    self.replacement.cmp_offset = self.cursor.cmp.offset;
                    self.replacement.stream_key = *stream_key;
                    self.replacement.stream_offset = offset;
                    self.replacement.bytes.clone_from(&self.cursor.finder.replacement);
                    self.replacement.extended.clone_from(&self.cursor.finder.extended_replacement);
                    self.replacement.stride = self.cursor.finder.stride as usize;

                    if fuzzer.debug.cmplog {
                        self.attempted.push(self.replacement.clone());
                    }