LLVM 22.0.0git
Classes | Functions
llvm::fuzzerop Namespace Reference

Classes

struct  OpDescriptor
 A description of some operation we can build while fuzzing IR. More...
class  SourcePred
 A matcher/generator for finding suitable values for the next source in an operation's partially completed argument list. More...

Functions

static SourcePred onlyType (Type *Only)
static SourcePred anyType ()
static SourcePred anyIntType ()
static SourcePred anyIntOrVecIntType ()
static SourcePred boolOrVecBoolType ()
static SourcePred anyFloatType ()
static SourcePred anyFloatOrVecFloatType ()
static SourcePred anyPtrType ()
static SourcePred sizedPtrType ()
static SourcePred matchFirstLengthWAnyType ()
static SourcePred matchSecondType ()
 Match values that have the same type as the first source.
static SourcePred anyAggregateType ()
static SourcePred anyVectorType ()
static SourcePred matchFirstType ()
 Match values that have the same type as the first source.
static SourcePred matchScalarOfFirstType ()
 Match values that have the first source's scalar type.
LLVM_ABI void makeConstantsWithType (Type *T, std::vector< Constant * > &Cs)
LLVM_ABI std::vector< Constant * > makeConstantsWithType (Type *T)
LLVM_ABI OpDescriptor selectDescriptor (unsigned Weight)
 Descriptors for individual operations.
LLVM_ABI OpDescriptor fnegDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor binOpDescriptor (unsigned Weight, Instruction::BinaryOps Op)
LLVM_ABI OpDescriptor cmpOpDescriptor (unsigned Weight, Instruction::OtherOps CmpOp, CmpInst::Predicate Pred)
LLVM_ABI OpDescriptor splitBlockDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor gepDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor extractValueDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor insertValueDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor extractElementDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor insertElementDescriptor (unsigned Weight)
LLVM_ABI OpDescriptor shuffleVectorDescriptor (unsigned Weight)

Function Documentation

◆ anyAggregateType()

SourcePred llvm::fuzzerop::anyAggregateType ( )
inlinestatic

Definition at line 236 of file OpDescriptor.h.

References Find(), and llvm::isa().

Referenced by extractValueDescriptor(), and insertValueDescriptor().

◆ anyFloatOrVecFloatType()

SourcePred llvm::fuzzerop::anyFloatOrVecFloatType ( )
inlinestatic

Definition at line 144 of file OpDescriptor.h.

Referenced by binOpDescriptor(), cmpOpDescriptor(), and fnegDescriptor().

◆ anyFloatType()

SourcePred llvm::fuzzerop::anyFloatType ( )
inlinestatic

Definition at line 136 of file OpDescriptor.h.

◆ anyIntOrVecIntType()

SourcePred llvm::fuzzerop::anyIntOrVecIntType ( )
inlinestatic

Definition at line 122 of file OpDescriptor.h.

Referenced by binOpDescriptor(), and cmpOpDescriptor().

◆ anyIntType()

SourcePred llvm::fuzzerop::anyIntType ( )
inlinestatic

Definition at line 114 of file OpDescriptor.h.

Referenced by extractElementDescriptor(), gepDescriptor(), and insertElementDescriptor().

◆ anyPtrType()

SourcePred llvm::fuzzerop::anyPtrType ( )
inlinestatic

Definition at line 151 of file OpDescriptor.h.

References llvm::PoisonValue::get(), llvm::PointerType::getUnqual(), and T.

◆ anyType()

SourcePred llvm::fuzzerop::anyType ( )
inlinestatic

Definition at line 106 of file OpDescriptor.h.

Referenced by llvm::RandomIRBuilder::findOrCreateSource().

◆ anyVectorType()

SourcePred llvm::fuzzerop::anyVectorType ( )
inlinestatic

Definition at line 254 of file OpDescriptor.h.

Referenced by extractElementDescriptor(), insertElementDescriptor(), and shuffleVectorDescriptor().

◆ binOpDescriptor()

OpDescriptor llvm::fuzzerop::binOpDescriptor ( unsigned Weight,
Instruction::BinaryOps Op )

Definition at line 116 of file Operations.cpp.

References anyFloatOrVecFloatType(), anyIntOrVecIntType(), llvm::BinaryOperator::Create(), llvm_unreachable, and matchFirstType().

Referenced by llvm::describeFuzzerFloatOps(), and llvm::describeFuzzerIntOps().

◆ boolOrVecBoolType()

SourcePred llvm::fuzzerop::boolOrVecBoolType ( )
inlinestatic

Definition at line 129 of file OpDescriptor.h.

Referenced by selectDescriptor().

◆ cmpOpDescriptor()

OpDescriptor llvm::fuzzerop::cmpOpDescriptor ( unsigned Weight,
Instruction::OtherOps CmpOp,
CmpInst::Predicate Pred )

Definition at line 148 of file Operations.cpp.

References anyFloatOrVecFloatType(), anyIntOrVecIntType(), llvm::CmpInst::Create(), llvm_unreachable, and matchFirstType().

Referenced by llvm::describeFuzzerFloatOps(), and llvm::describeFuzzerIntOps().

◆ extractElementDescriptor()

OpDescriptor llvm::fuzzerop::extractElementDescriptor ( unsigned Weight)

Definition at line 316 of file Operations.cpp.

References anyIntType(), anyVectorType(), and llvm::ExtractElementInst::Create().

Referenced by llvm::describeFuzzerVectorOps().

◆ extractValueDescriptor()

OpDescriptor llvm::fuzzerop::extractValueDescriptor ( unsigned Weight)

Definition at line 244 of file Operations.cpp.

References anyAggregateType(), llvm::cast(), llvm::ExtractValueInst::Create(), and validExtractValueIndex().

Referenced by llvm::describeFuzzerAggregateOps().

◆ fnegDescriptor()

OpDescriptor llvm::fuzzerop::fnegDescriptor ( unsigned Weight)

Definition at line 109 of file Operations.cpp.

References anyFloatOrVecFloatType(), and llvm::UnaryOperator::Create().

Referenced by llvm::describeFuzzerUnaryOperations().

◆ gepDescriptor()

OpDescriptor llvm::fuzzerop::gepDescriptor ( unsigned Weight)

Definition at line 198 of file Operations.cpp.

References anyIntType(), llvm::ArrayRef(), llvm::GetElementPtrInst::Create(), llvm::ArrayRef< T >::drop_front(), and sizedPtrType().

Referenced by llvm::describeFuzzerPointerOps().

◆ insertElementDescriptor()

OpDescriptor llvm::fuzzerop::insertElementDescriptor ( unsigned Weight)

Definition at line 325 of file Operations.cpp.

References anyIntType(), anyVectorType(), llvm::InsertElementInst::Create(), and matchScalarOfFirstType().

Referenced by llvm::describeFuzzerVectorOps().

◆ insertValueDescriptor()

OpDescriptor llvm::fuzzerop::insertValueDescriptor ( unsigned Weight)

Definition at line 304 of file Operations.cpp.

References anyAggregateType(), llvm::cast(), llvm::InsertValueInst::Create(), matchScalarInAggregate(), and validInsertValueIndex().

Referenced by llvm::describeFuzzerAggregateOps().

◆ makeConstantsWithType() [1/2]

std::vector< Constant * > llvm::fuzzerop::makeConstantsWithType ( Type * T)

Definition at line 56 of file OpDescriptor.cpp.

References makeConstantsWithType(), and T.

◆ makeConstantsWithType() [2/2]

void llvm::fuzzerop::makeConstantsWithType ( Type * T,
std::vector< Constant * > & Cs )

Populate a small list of potentially interesting constants of a given type.

Definition at line 20 of file OpDescriptor.cpp.

References llvm::dyn_cast(), llvm::PoisonValue::get(), llvm::UndefValue::get(), llvm::APFloat::getInf(), llvm::APFloat::getLargest(), llvm::APInt::getMaxValue(), llvm::APInt::getMinValue(), llvm::APFloat::getNaN(), llvm::APInt::getOneBitSet(), llvm::APInt::getSignedMaxValue(), llvm::APInt::getSignedMinValue(), llvm::APFloat::getSmallest(), llvm::ConstantVector::getSplat(), llvm::APFloat::getZero(), makeConstantsWithType(), T, and UseUndef.

Referenced by makeConstantsWithType(), makeConstantsWithType(), matchFirstLengthWAnyType(), matchFirstType(), matchScalarInAggregate(), matchScalarOfFirstType(), matchSecondType(), onlyType(), and llvm::fuzzerop::SourcePred::SourcePred().

◆ matchFirstLengthWAnyType()

SourcePred llvm::fuzzerop::matchFirstLengthWAnyType ( )
inlinestatic

Definition at line 188 of file OpDescriptor.h.

References assert(), llvm::dyn_cast(), llvm::ArrayRef< T >::empty(), llvm::First, llvm::VectorType::get(), llvm::VectorType::getElementCount(), getType(), llvm::VectorType::isValidElementType(), makeConstantsWithType(), and T.

Referenced by selectDescriptor().

◆ matchFirstType()

SourcePred llvm::fuzzerop::matchFirstType ( )
inlinestatic

Match values that have the same type as the first source.

Definition at line 266 of file OpDescriptor.h.

References assert(), llvm::ArrayRef< T >::empty(), getType(), and makeConstantsWithType().

Referenced by binOpDescriptor(), cmpOpDescriptor(), and shuffleVectorDescriptor().

◆ matchScalarOfFirstType()

SourcePred llvm::fuzzerop::matchScalarOfFirstType ( )
inlinestatic

Match values that have the first source's scalar type.

Definition at line 279 of file OpDescriptor.h.

References assert(), llvm::ArrayRef< T >::empty(), getType(), and makeConstantsWithType().

Referenced by insertElementDescriptor().

◆ matchSecondType()

SourcePred llvm::fuzzerop::matchSecondType ( )
inlinestatic

Match values that have the same type as the first source.

Definition at line 224 of file OpDescriptor.h.

References assert(), getType(), makeConstantsWithType(), and llvm::ArrayRef< T >::size().

Referenced by selectDescriptor().

◆ onlyType()

SourcePred llvm::fuzzerop::onlyType ( Type * Only)
inlinestatic

Definition at line 96 of file OpDescriptor.h.

References makeConstantsWithType().

Referenced by llvm::RandomIRBuilder::connectToSink(), llvm::InsertCFGStrategy::mutate(), llvm::InsertFunctionStrategy::mutate(), llvm::InsertPHIStrategy::mutate(), and llvm::InstDeleterIRStrategy::mutate().

◆ selectDescriptor()

OpDescriptor llvm::fuzzerop::selectDescriptor ( unsigned Weight)

Descriptors for individual operations.

Definition at line 100 of file Operations.cpp.

References boolOrVecBoolType(), llvm::SelectInst::Create(), matchFirstLengthWAnyType(), and matchSecondType().

Referenced by llvm::describeFuzzerOtherOps().

◆ shuffleVectorDescriptor()

OpDescriptor llvm::fuzzerop::shuffleVectorDescriptor ( unsigned Weight)

Definition at line 350 of file Operations.cpp.

References anyVectorType(), matchFirstType(), and validShuffleVectorIndex().

Referenced by llvm::describeFuzzerVectorOps().

◆ sizedPtrType()

SourcePred llvm::fuzzerop::sizedPtrType ( )
inlinestatic

Definition at line 166 of file OpDescriptor.h.

References llvm::PoisonValue::get(), llvm::PointerType::getUnqual(), and T.

Referenced by gepDescriptor().

◆ splitBlockDescriptor()

OpDescriptor llvm::fuzzerop::splitBlockDescriptor ( unsigned Weight)

Definition at line 166 of file Operations.cpp.

References llvm::Block, llvm::BranchInst::Create(), llvm::PoisonValue::get(), llvm::Next, and PHI.

Referenced by llvm::describeFuzzerControlFlowOps().

Generated on for LLVM by doxygen 1.14.0