<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Aug 10, 2017 at 10:56 AM, Nico Weber via cfe-commits <span dir="ltr"><<a href="mailto:cfe-commits@lists.llvm.org" target="_blank">cfe-commits@lists.llvm.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">I really believe this has way too many deps to live in the clang repro, as said on the review already. </div></blockquote><div><br></div><div>I don't have a very strong opinion here and would be happy to move if I see more support for Nico's opinion</div><div>(I haven't seen it on the review, and you didn't object further, so we proceeded). </div><div>Again, my rational is that the simpler it is to use the more likely other researchers will extend this work. </div><div><br></div><div>BTW, I am going to commit a Dockerfile that will make experimenting with this trivial. </div><div>My current (dirty) version looks like this. Not too much trouble. </div><div><br></div><div><div>FROM ubuntu:16.04</div><div>RUN apt-get update -y && apt-get install -y autoconf automake libtool curl make g++ unzip</div><div>RUN apt-get install -y wget</div><div>RUN apt-get install -y git binutils liblzma-dev libz-dev</div><div>RUN apt-get install -y python-all</div><div>RUN apt-get install -y cmake ninja-build</div><div>RUN apt-get install -y subversion</div><div><br></div><div>WORKDIR /root</div><div>RUN wget -qO- <a href="https://github.com/google/protobuf/releases/download/v3.3.0/protobuf-cpp-3.3.0.tar.gz">https://github.com/google/protobuf/releases/download/v3.3.0/protobuf-cpp-3.3.0.tar.gz</a> | tar zxf -</div><div>RUN cd protobuf-3.3.0 && ./autogen.sh && ./configure && make -j $(nproc) && make check -j $(nproc) && make install && ldconfig</div><div>RUN apt-get install -y pkg-config</div><div>RUN svn co <a href="http://llvm.org/svn/llvm-project/llvm/trunk">http://llvm.org/svn/llvm-project/llvm/trunk</a> llvm</div><div>RUN cd llvm/tools && svn co <a href="http://llvm.org/svn/llvm-project/cfe/trunk">http://llvm.org/svn/llvm-project/cfe/trunk</a> clang -r $(cd ../ && svn info | grep Revision | awk '{print $2}')</div><div>RUN cd llvm/projects && svn co <a href="http://llvm.org/svn/llvm-project/compiler-rt/trunk">http://llvm.org/svn/llvm-project/compiler-rt/trunk</a> clang -r $(cd ../ && svn info | grep Revision | awk '{print $2}')</div><div>RUN mkdir build0 && cd build0 && cmake -GNinja -DCMAKE_BUILD_TYPE=Release ../llvm && ninja</div><div>RUN mkdir build1 && cd build1 && cmake -GNinja -DCMAKE_BUILD_TYPE=Release ../llvm -DLLVM_ENABLE_ASSERTIONS=ON  -DCMAKE_C_COMPILER=`pwd`/../build0/bin/clang -DCMAKE_CXX_COMPILER=`pwd`/../build0/bin/clang++ -DLLVM_USE_SANITIZE_COVERAGE=YES -DLLVM_USE_SANITIZER=Address -DCLANG_ENABLE_PROTO_FUZZER=ON</div><div>RUN cd build1 && ninja clang-fuzzer</div><div>RUN cd build1 && ninja clang-proto-fuzzer</div><div>#RUN cd build1 && ninja clang-proto-to-cxx</div></div><div><br></div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Maybe this could live in clang-extra instead? </div></blockquote><div><br></div><div>clang-extra? </div><div>That's a separate repo, right? </div><div>It may require more cmake trickery, and we'll also have to share  the clang-fuzzer-specific code between two repos. </div><div>I do want the original clang-fuzzer to remain where it was, and both (clang-fuzzer and clang-proto-fuzzer) share the code. </div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="gmail-HOEnZb"><div class="gmail-h5"><div class="gmail_extra"><br><div class="gmail_quote">On Aug 8, 2017 4:15 PM, "Matt Morehouse via cfe-commits" <<a href="mailto:cfe-commits@lists.llvm.org" target="_blank">cfe-commits@lists.llvm.org</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Author: morehouse<br>
Date: Tue Aug  8 13:15:04 2017<br>
New Revision: 310408<br>
<br>
URL: <a href="http://llvm.org/viewvc/llvm-project?rev=310408&view=rev" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject?rev=310408&view=rev</a><br>
Log:<br>
Integrate Kostya's clang-proto-fuzzer with LLVM.<br>
<br>
Summary:<br>
The clang-proto-fuzzer models a subset of C++ as a protobuf and<br>
uses libprotobuf-mutator to generate interesting mutations of C++<br>
programs.  Clang-proto-fuzzer has already found several bugs in<br>
Clang (e.g., <a href="https://bugs.llvm.org/show_bug.cgi?id=33747" rel="noreferrer" target="_blank">https://bugs.llvm.org/show_bug<wbr>.cgi?id=33747</a>,<br>
<a href="https://bugs.llvm.org/show_bug.cgi?id=33749" rel="noreferrer" target="_blank">https://bugs.llvm.org/show_bug<wbr>.cgi?id=33749</a>).<br>
<br>
As with clang-fuzzer, clang-proto-fuzzer requires the following<br>
cmake flags:<br>
- CMAKE_C_COMPILER=clang<br>
- CMAKE_CXX_COMPILER=clang++<br>
- LLVM_USE_SANITIZE_COVERAGE=<wbr>YES  // needed for libFuzzer<br>
- LLVM_USE_SANITIZER=Address  // needed for libFuzzer<br>
<br>
In addition, clang-proto-fuzzer requires:<br>
- CLANG_ENABLE_PROTO_FUZZER=ON<br>
<br>
clang-proto-fuzzer also requires the following dependencies:<br>
- binutils  // needed for libprotobuf-mutator<br>
- liblzma-dev  // needed for libprotobuf-mutator<br>
- libz-dev  // needed for libprotobuf-mutator<br>
- docbook2x  // needed for libprotobuf-mutator<br>
- Recent version of protobuf [3.3.0 is known to work]<br>
<br>
A working version of libprotobuf-mutator will automatically be<br>
downloaded and built as an external project.<br>
<br>
Implementation of clang-proto-fuzzer provided by Kostya<br>
Serebryany.<br>
<br>
<a href="https://bugs.llvm.org/show_bug.cgi?id=33829" rel="noreferrer" target="_blank">https://bugs.llvm.org/show_bug<wbr>.cgi?id=33829</a><br>
<br>
Reviewers: kcc, vitalybuka, bogner<br>
<br>
Reviewed By: kcc, vitalybuka<br>
<br>
Subscribers: thakis, mgorny, cfe-commits<br>
<br>
Differential Revision: <a href="https://reviews.llvm.org/D36324" rel="noreferrer" target="_blank">https://reviews.llvm.org/D3632<wbr>4</a><br>
<br>
Added:<br>
    cfe/trunk/cmake/modules/Protob<wbr>ufMutator.cmake<br>
    cfe/trunk/tools/clang-fuzzer/E<wbr>xampleClangProtoFuzzer.cpp<br>
    cfe/trunk/tools/clang-fuzzer/R<wbr>EADME.txt<br>
    cfe/trunk/tools/clang-fuzzer/c<wbr>xx_proto.proto<br>
    cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/<br>
    cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/CMakeLists.txt<br>
    cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.cpp<br>
    cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.h<br>
    cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/<br>
    cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/CMakeLists.txt<br>
    cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.cpp<br>
    cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.h<br>
    cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx_main.<wbr>cpp<br>
Modified:<br>
    cfe/trunk/CMakeLists.txt<br>
    cfe/trunk/tools/clang-fuzzer/C<wbr>MakeLists.txt<br>
    cfe/trunk/tools/clang-fuzzer/C<wbr>langFuzzer.cpp<br>
<br>
Modified: cfe/trunk/CMakeLists.txt<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/CMakeLists.txt?rev=310408&r1=310407&r2=310408&view=diff" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/CMakeLists.txt<wbr>?rev=310408&r1=310407&r2=31040<wbr>8&view=diff</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/CMakeLists.txt (original)<br>
+++ cfe/trunk/CMakeLists.txt Tue Aug  8 13:15:04 2017<br>
@@ -377,6 +377,8 @@ option(CLANG_ENABLE_STATIC_ANA<wbr>LYZER "Bui<br>
 option(CLANG_ANALYZER_BUILD_<wbr>Z3<br>
   "Build the static analyzer with the Z3 constraint manager." OFF)<br>
<br>
+option(CLANG_ENABLE_PROTO_FUZ<wbr>ZER "Build Clang protobuf fuzzer." OFF)<br>
+<br>
 if(NOT CLANG_ENABLE_STATIC_ANALYZER AND (CLANG_ENABLE_ARCMT OR CLANG_ANALYZER_BUILD_Z3))<br>
   message(FATAL_ERROR "Cannot disable static analyzer while enabling ARCMT or Z3")<br>
 endif()<br>
<br>
Added: cfe/trunk/cmake/modules/Protob<wbr>ufMutator.cmake<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/cmake/modules/ProtobufMutator.cmake?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/cmake/modules/<wbr>ProtobufMutator.cmake?rev=<wbr>310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/cmake/modules/Protob<wbr>ufMutator.cmake (added)<br>
+++ cfe/trunk/cmake/modules/Protob<wbr>ufMutator.cmake Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,24 @@<br>
+set(PBM_PREFIX protobuf_mutator)<br>
+set(PBM_PATH ${CMAKE_CURRENT_BINARY_DIR}/${<wbr>PBM_PREFIX}/src/${PBM_PREFIX})<br>
+set(PBM_LIB_PATH ${PBM_PATH}/src/libprotobuf-mu<wbr>tator.a)<br>
+set(PBM_FUZZ_LIB_PATH ${PBM_PATH}/src/libfuzzer/libp<wbr>rotobuf-mutator-libfuzzer.a)<br>
+<br>
+ExternalProject_Add(${PBM_PRE<wbr>FIX}<br>
+  PREFIX ${PBM_PREFIX}<br>
+  GIT_REPOSITORY <a href="https://github.com/google/libprotobuf-mutator.git" rel="noreferrer" target="_blank">https://github.com/google/libp<wbr>rotobuf-mutator.git</a><br>
+  GIT_TAG 34287f8<br>
+  CONFIGURE_COMMAND ${CMAKE_COMMAND} -G${CMAKE_GENERATOR}<br>
+    -DCMAKE_C_COMPILER=${CMAKE_C_C<wbr>OMPILER}<br>
+    -DCMAKE_CXX_COMPILER=${CMAKE_C<wbr>XX_COMPILER}<br>
+    -DCMAKE_BUILD_TYPE=${CMAKE_BUI<wbr>LD_TYPE}<br>
+  BUILD_COMMAND ${CMAKE_MAKE_PROGRAM}<br>
+  BUILD_BYPRODUCTS ${PBM_LIB_PATH} ${PBM_FUZZ_LIB_PATH}<br>
+  BUILD_IN_SOURCE 1<br>
+  INSTALL_COMMAND ""<br>
+  LOG_DOWNLOAD 1<br>
+  LOG_CONFIGURE 1<br>
+  LOG_BUILD 1<br>
+  )<br>
+<br>
+set(ProtobufMutator_INCLUDE_D<wbr>IRS ${PBM_PATH})<br>
+set(ProtobufMutator_LIBRARIES ${PBM_FUZZ_LIB_PATH} ${PBM_LIB_PATH})<br>
<br>
Modified: cfe/trunk/tools/clang-fuzzer/C<wbr>MakeLists.txt<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/CMakeLists.txt?rev=310408&r1=310407&r2=310408&view=diff" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/CMakeLists.txt?rev=310408<wbr>&r1=310407&r2=310408&view=diff</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/C<wbr>MakeLists.txt (original)<br>
+++ cfe/trunk/tools/clang-fuzzer/C<wbr>MakeLists.txt Tue Aug  8 13:15:04 2017<br>
@@ -1,21 +1,60 @@<br>
 if( LLVM_USE_SANITIZE_COVERAGE )<br>
   set(LLVM_LINK_COMPONENTS ${LLVM_TARGETS_TO_BUILD})<br>
<br>
+  if(CLANG_ENABLE_PROTO_FUZZER)<br>
+    # Create protobuf .h and .cc files, and put them in a library for use by<br>
+    # clang-proto-fuzzer components.<br>
+    find_package(Protobuf REQUIRED)<br>
+    add_definitions(-DGOOGLE_PROTO<wbr>BUF_NO_RTTI)<br>
+    include_directories(${PROTOBUF<wbr>_INCLUDE_DIRS})<br>
+    include_directories(${CMAKE_CU<wbr>RRENT_BINARY_DIR})<br>
+    protobuf_generate_cpp(PROTO_SR<wbr>CS PROTO_HDRS cxx_proto.proto)<br>
+    # Hack to bypass LLVM's cmake sources check and allow multiple libraries and<br>
+    # executables from this directory.<br>
+    set(LLVM_OPTIONAL_SOURCES<br>
+      ClangFuzzer.cpp<br>
+      ExampleClangProtoFuzzer.cpp<br>
+      ${PROTO_SRCS}<br>
+      )<br>
+    add_clang_library(clangCXXProt<wbr>o<br>
+      ${PROTO_SRCS}<br>
+      ${PROTO_HDRS}<br>
+<br>
+      LINK_LIBS<br>
+      ${PROTOBUF_LIBRARIES}<br>
+      )<br>
+<br>
+    # Build and include libprotobuf-mutator<br>
+    include(ProtobufMutator)<br>
+    include_directories(${Protobuf<wbr>Mutator_INCLUDE_DIRS})<br>
+<br>
+    # Build the protobuf->C++ translation library and driver.<br>
+    add_clang_subdirectory(proto-t<wbr>o-cxx)<br>
+<br>
+    # Build the protobuf fuzzer<br>
+    add_clang_executable(clang-pro<wbr>to-fuzzer ExampleClangProtoFuzzer.cpp)<br>
+    target_link_libraries(clang-pr<wbr>oto-fuzzer<br>
+      ${ProtobufMutator_LIBRARIES}<br>
+      clangCXXProto<br>
+      clangHandleCXX<br>
+      clangProtoToCXX<br>
+      LLVMFuzzer<br>
+      )<br>
+  else()<br>
+    # Hack to bypass LLVM's cmake sources check and allow multiple libraries and<br>
+    # executables from this directory.<br>
+    set(LLVM_OPTIONAL_SOURCES ClangFuzzer.cpp ExampleClangProtoFuzzer.cpp)<br>
+  endif()<br>
+<br>
+  add_clang_subdirectory(handle-<wbr>cxx)<br>
+<br>
   add_clang_executable(clang-fu<wbr>zzer<br>
     EXCLUDE_FROM_ALL<br>
     ClangFuzzer.cpp<br>
     )<br>
<br>
   target_link_libraries(clang-f<wbr>uzzer<br>
-    ${CLANG_FORMAT_LIB_DEPS}<br>
-    clangAST<br>
-    clangBasic<br>
-    clangCodeGen<br>
-    clangDriver<br>
-    clangFrontend<br>
-    clangRewriteFrontend<br>
-    clangStaticAnalyzerFrontend<br>
-    clangTooling<br>
+    clangHandleCXX<br>
     LLVMFuzzer<br>
     )<br>
 endif()<br>
<br>
Modified: cfe/trunk/tools/clang-fuzzer/C<wbr>langFuzzer.cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/ClangFuzzer.cpp?rev=310408&r1=310407&r2=310408&view=diff" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/ClangFuzzer.cpp?rev=31040<wbr>8&r1=310407&r2=310408&view=<wbr>diff</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/C<wbr>langFuzzer.cpp (original)<br>
+++ cfe/trunk/tools/clang-fuzzer/C<wbr>langFuzzer.cpp Tue Aug  8 13:15:04 2017<br>
@@ -13,43 +13,12 @@<br>
 ///<br>
 //===------------------------<wbr>------------------------------<wbr>----------------===//<br>
<br>
-#include "clang/Tooling/Tooling.h"<br>
-#include "clang/CodeGen/CodeGenAction.h<wbr>"<br>
-#include "clang/Frontend/CompilerInstan<wbr>ce.h"<br>
-#include "clang/Lex/PreprocessorOptions<wbr>.h"<br>
-#include "llvm/Option/Option.h"<br>
-#include "llvm/Support/TargetSelect.h"<br>
+#include "handle-cxx/handle_cxx.h"<br>
<br>
-using namespace clang;<br>
+using namespace clang_fuzzer;<br>
<br>
 extern "C" int LLVMFuzzerTestOneInput(uint8_t *data, size_t size) {<br>
   std::string s((const char *)data, size);<br>
-  llvm::InitializeAllTargets();<br>
-  llvm::InitializeAllTargetMCs()<wbr>;<br>
-  llvm::InitializeAllAsmPrinters<wbr>();<br>
-  llvm::InitializeAllAsmParsers(<wbr>);<br>
-<br>
-  llvm::opt::ArgStringList CC1Args;<br>
-  CC1Args.push_back("-cc1");<br>
-  CC1Args.push_back("./test.cc")<wbr>;<br>
-  CC1Args.push_back("-O2");<br>
-  llvm::IntrusiveRefCntPtr<FileM<wbr>anager> Files(<br>
-      new FileManager(FileSystemOptions(<wbr>)));<br>
-  IgnoringDiagConsumer Diags;<br>
-  IntrusiveRefCntPtr<DiagnosticO<wbr>ptions> DiagOpts = new DiagnosticOptions();<br>
-  DiagnosticsEngine Diagnostics(<br>
-      IntrusiveRefCntPtr<clang::Diag<wbr>nosticIDs>(new DiagnosticIDs()), &*DiagOpts,<br>
-      &Diags, false);<br>
-  std::unique_ptr<clang::Compile<wbr>rInvocation> Invocation(<br>
-      tooling::newInvocation(&Diagno<wbr>stics, CC1Args));<br>
-  std::unique_ptr<llvm::MemoryBu<wbr>ffer> Input =<br>
-      llvm::MemoryBuffer::getMemBuff<wbr>er(s);<br>
-  Invocation->getPreprocessorOpt<wbr>s().addRemappedFile("./test.<wbr>cc", Input.release());<br>
-  std::unique_ptr<tooling::ToolA<wbr>ction> action(<br>
-      tooling::newFrontendActionFact<wbr>ory<clang::EmitObjAction>());<br>
-  std::shared_ptr<PCHContainerOp<wbr>erations> PCHContainerOps =<br>
-      std::make_shared<PCHContainerO<wbr>perations>();<br>
-  action->runInvocation(std::mov<wbr>e(Invocation), Files.get(), PCHContainerOps,<br>
-                        &Diags);<br>
+  HandleCXX(s, {"-O2"});<br>
   return 0;<br>
 }<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/E<wbr>xampleClangProtoFuzzer.cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/ExampleClangProtoFuzzer.cpp?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/ExampleClangProtoFuzzer.<wbr>cpp?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/E<wbr>xampleClangProtoFuzzer.cpp (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/E<wbr>xampleClangProtoFuzzer.cpp Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,28 @@<br>
+//===-- ExampleClangProtoFuzzer.cpp - Fuzz Clang --------------------------===/<wbr>/<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+///<br>
+/// \file<br>
+/// \brief This file implements a function that runs Clang on a single<br>
+///  input and uses libprotobuf-mutator to find new inputs. This function is<br>
+///  then linked into the Fuzzer library.<br>
+///<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+#include "cxx_proto.pb.h"<br>
+#include "handle-cxx/handle_cxx.h"<br>
+#include "proto-to-cxx/proto_to_cxx.h"<br>
+<br>
+#include "src/libfuzzer/libfuzzer_macro<wbr>.h"<br>
+<br>
+using namespace clang_fuzzer;<br>
+<br>
+DEFINE_BINARY_PROTO_FUZZER(co<wbr>nst Function& input) {<br>
+  auto S = FunctionToString(input);<br>
+  HandleCXX(S, {"-O2"});<br>
+}<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/R<wbr>EADME.txt<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/README.txt?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/README.txt?rev=310408&vie<wbr>w=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/R<wbr>EADME.txt (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/R<wbr>EADME.txt Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,73 @@<br>
+This directory contains two utilities for fuzzing Clang: clang-fuzzer and<br>
+clang-proto-fuzzer.  Both use libFuzzer to generate inputs to clang via<br>
+coverage-guided mutation.<br>
+<br>
+The two utilities differ, however, in how they structure inputs to Clang.<br>
+clang-fuzzer makes no attempt to generate valid C++ programs and is therefore<br>
+primarily useful for stressing the surface layers of Clang (i.e. lexer, parser).<br>
+clang-proto-fuzzer uses a protobuf class to describe a subset of the C++<br>
+language and then uses libprotobuf-mutator to mutate instantiations of that<br>
+class, producing valid C++ programs in the process.  As a result,<br>
+clang-proto-fuzzer is better at stressing deeper layers of Clang and LLVM.<br>
+<br>
+=============================<wbr>======<br>
+ Building clang-fuzzer<br>
+=============================<wbr>======<br>
+Within your LLVM build directory, run CMake with the following variable<br>
+definitions:<br>
+- CMAKE_C_COMPILER=clang<br>
+- CMAKE_CXX_COMPILER=clang++<br>
+- LLVM_USE_SANITIZE_COVERAGE=YES<br>
+- LLVM_USE_SANITIZER=Address<br>
+<br>
+Then build the clang-fuzzer target.<br>
+<br>
+Example:<br>
+  cd $LLVM_SOURCE_DIR<br>
+  mkdir build && cd build<br>
+  cmake .. -GNinja -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ \<br>
+    -DLLVM_USE_SANITIZE_COVERAGE=Y<wbr>ES -DLLVM_USE_SANITIZER=Address<br>
+  ninja clang-fuzzer<br>
+<br>
+<br>
+=============================<wbr>==========================<br>
+ Building clang-proto-fuzzer (Linux-only instructions)<br>
+=============================<wbr>==========================<br>
+Install the necessary dependencies:<br>
+- binutils  // needed for libprotobuf-mutator<br>
+- liblzma-dev  // needed for libprotobuf-mutator<br>
+- libz-dev  // needed for libprotobuf-mutator<br>
+- docbook2x  // needed for libprotobuf-mutator<br>
+- Recent version of protobuf [3.3.0 is known to work]<br>
+<br>
+Within your LLVM build directory, run CMake with the following variable<br>
+definitions:<br>
+- CMAKE_C_COMPILER=clang<br>
+- CMAKE_CXX_COMPILER=clang++<br>
+- LLVM_USE_SANITIZE_COVERAGE=YES<br>
+- LLVM_USE_SANITIZER=Address<br>
+- CLANG_ENABLE_PROTO_FUZZER=ON<br>
+<br>
+Then build the clang-proto-fuzzer and clang-proto-to-cxx targets.  Optionally,<br>
+you may also build clang-fuzzer with this setup.<br>
+<br>
+Example:<br>
+  cd $LLVM_SOURCE_DIR<br>
+  mkdir build && cd build<br>
+  cmake .. -GNinja -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ \<br>
+    -DLLVM_USE_SANITIZE_COVERAGE=Y<wbr>ES -DLLVM_USE_SANITIZER=Address \<br>
+    -DCLANG_ENABLE_PROTO_FUZZER=ON<br>
+  ninja clang-proto-fuzzer clang-proto-to-cxx<br>
+<br>
+<br>
+=====================<br>
+ Running the fuzzers<br>
+=====================<br>
+clang-fuzzer:<br>
+  bin/clang-fuzzer CORPUS_DIR<br>
+<br>
+clang-proto-fuzzer:<br>
+  bin/clang-proto-fuzzer CORPUS_DIR<br>
+<br>
+Translating a clang-proto-fuzzer corpus output to C++:<br>
+  bin/clang-proto-to-cxx CORPUS_OUTPUT_FILE<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/c<wbr>xx_proto.proto<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/cxx_proto.proto?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/cxx_proto.proto?rev=31040<wbr>8&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/c<wbr>xx_proto.proto (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/c<wbr>xx_proto.proto Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,93 @@<br>
+//===-- cxx_proto.proto - Protobuf description of C++ ---------------------===//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+///<br>
+/// \file<br>
+/// \brief This file describes a subset of C++ as a protobuf.  It is used to<br>
+///  more easily find interesting inputs for fuzzing Clang.<br>
+///<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+syntax = "proto2";<br>
+<br>
+message VarRef {<br>
+  required int32 varnum = 1;<br>
+}<br>
+<br>
+message Lvalue {<br>
+  required VarRef varref = 1;<br>
+}<br>
+<br>
+message Const {<br>
+  required int32 val = 1;<br>
+}<br>
+<br>
+message BinaryOp {<br>
+  enum Op {<br>
+    PLUS = 0;<br>
+    MINUS = 1;<br>
+    MUL = 2;<br>
+    DIV = 3;<br>
+    MOD = 4;<br>
+    XOR = 5;<br>
+    AND = 6;<br>
+    OR = 7;<br>
+    EQ = 8;<br>
+    NE = 9;<br>
+    LE = 10;<br>
+    GE = 11;<br>
+    LT = 12;<br>
+    GT = 13;<br>
+  };<br>
+  required Op op = 1;<br>
+  required Rvalue left = 2;<br>
+  required Rvalue right = 3;<br>
+}<br>
+<br>
+message Rvalue {<br>
+  oneof rvalue_oneof {<br>
+    VarRef varref = 1;<br>
+    Const cons = 2;<br>
+    BinaryOp binop = 3;<br>
+  }<br>
+}<br>
+<br>
+message AssignmentStatement {<br>
+  required Lvalue lvalue = 1;<br>
+  required Rvalue rvalue = 2;<br>
+}<br>
+<br>
+<br>
+message IfElse {<br>
+  required Rvalue cond = 1;<br>
+  required StatementSeq if_body = 2;<br>
+  required StatementSeq else_body = 3;<br>
+}<br>
+<br>
+message While {<br>
+  required Rvalue cond = 1;<br>
+  required StatementSeq body = 2;<br>
+}<br>
+<br>
+message Statement {<br>
+  oneof stmt_oneof {<br>
+    AssignmentStatement assignment = 1;<br>
+    IfElse              ifelse     = 2;<br>
+    While               while_loop = 3;<br>
+  }<br>
+}<br>
+<br>
+message StatementSeq {<br>
+  repeated Statement statements = 1;<br>
+}<br>
+<br>
+message Function {<br>
+  required StatementSeq statements = 1;<br>
+}<br>
+<br>
+package clang_fuzzer;<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/CMakeLists.txt<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/handle-cxx/CMakeLists.txt?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/handle-cxx/CMakeLists.txt<wbr>?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/CMakeLists.txt (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/CMakeLists.txt Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,11 @@<br>
+set(LLVM_LINK_COMPONENTS ${LLVM_TARGETS_TO_BUILD})<br>
+<br>
+add_clang_library(clangHandle<wbr>CXX<br>
+  handle_cxx.cpp<br>
+<br>
+  LINK_LIBS<br>
+  clangCodeGen<br>
+  clangFrontend<br>
+  clangLex<br>
+  clangTooling<br>
+  )<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/handle-cxx/handle_cxx.cpp?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/handle-cxx/handle_cxx.cpp<wbr>?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.cpp (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.cpp Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,58 @@<br>
+//==-- handle_cxx.cpp - Helper function for Clang fuzzers ------------------==//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+//<br>
+// Implements HandleCXX for use by the Clang fuzzers.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+#include "handle_cxx.h"<br>
+<br>
+#include "clang/CodeGen/CodeGenAction.h<wbr>"<br>
+#include "clang/Frontend/CompilerInstan<wbr>ce.h"<br>
+#include "clang/Lex/PreprocessorOptions<wbr>.h"<br>
+#include "clang/Tooling/Tooling.h"<br>
+#include "llvm/Option/Option.h"<br>
+#include "llvm/Support/TargetSelect.h"<br>
+<br>
+using namespace clang;<br>
+<br>
+void clang_fuzzer::HandleCXX(const std::string &S,<br>
+                             const std::vector<const char *> &ExtraArgs) {<br>
+  llvm::InitializeAllTargets();<br>
+  llvm::InitializeAllTargetMCs()<wbr>;<br>
+  llvm::InitializeAllAsmPrinters<wbr>();<br>
+  llvm::InitializeAllAsmParsers(<wbr>);<br>
+<br>
+  llvm::opt::ArgStringList CC1Args;<br>
+  CC1Args.push_back("-cc1");<br>
+  for (auto &A : ExtraArgs)<br>
+    CC1Args.push_back(A);<br>
+  CC1Args.push_back("./test.cc")<wbr>;<br>
+<br>
+  llvm::IntrusiveRefCntPtr<FileM<wbr>anager> Files(<br>
+      new FileManager(FileSystemOptions(<wbr>)));<br>
+  IgnoringDiagConsumer Diags;<br>
+  IntrusiveRefCntPtr<DiagnosticO<wbr>ptions> DiagOpts = new DiagnosticOptions();<br>
+  DiagnosticsEngine Diagnostics(<br>
+      IntrusiveRefCntPtr<clang::Diag<wbr>nosticIDs>(new DiagnosticIDs()), &*DiagOpts,<br>
+      &Diags, false);<br>
+  std::unique_ptr<clang::Compile<wbr>rInvocation> Invocation(<br>
+      tooling::newInvocation(&Diagno<wbr>stics, CC1Args));<br>
+  std::unique_ptr<llvm::MemoryBu<wbr>ffer> Input =<br>
+      llvm::MemoryBuffer::getMemBuff<wbr>er(S);<br>
+  Invocation->getPreprocessorOpt<wbr>s().addRemappedFile("./test.<wbr>cc",<br>
+                                                    Input.release());<br>
+  std::unique_ptr<tooling::ToolA<wbr>ction> action(<br>
+      tooling::newFrontendActionFact<wbr>ory<clang::EmitObjAction>());<br>
+  std::shared_ptr<PCHContainerOp<wbr>erations> PCHContainerOps =<br>
+      std::make_shared<PCHContainerO<wbr>perations>();<br>
+  action->runInvocation(std::mov<wbr>e(Invocation), Files.get(), PCHContainerOps,<br>
+                        &Diags);<br>
+}<br>
+<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.h<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/handle-cxx/handle_cxx.h?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/handle-cxx/handle_cxx.h?<wbr>rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.h (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/h<wbr>andle-cxx/handle_cxx.h Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,25 @@<br>
+//==-- handle_cxx.h - Helper function for Clang fuzzers --------------------==//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+//<br>
+// Defines HandleCXX for use by the Clang fuzzers.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+#ifndef LLVM_CLANG_TOOLS_CLANG_FUZZER_<wbr>HANDLE_CXX_HANDLECXX_H<br>
+#define LLVM_CLANG_TOOLS_CLANG_FUZZER_<wbr>HANDLE_CXX_HANDLECXX_H<br>
+<br>
+#include <string><br>
+#include <vector><br>
+<br>
+namespace clang_fuzzer {<br>
+void HandleCXX(const std::string &S,<br>
+               const std::vector<const char *> &ExtraArgs);<br>
+} // namespace clang_fuzzer<br>
+<br>
+#endif<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/CMakeLists.txt<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/proto-to-cxx/CMakeLists.txt?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/proto-to-cxx/CMakeLists.<wbr>txt?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/CMakeLists.txt (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/CMakeLists.txt Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,10 @@<br>
+set(LLVM_LINK_COMPONENTS ${LLVM_TARGETS_TO_BUILD})<br>
+<br>
+# Hack to bypass LLVM's CMake source checks so we can have both a library and<br>
+# an executable built from this directory.<br>
+set(LLVM_OPTIONAL_SOURCES proto_to_cxx.cpp proto_to_cxx_main.cpp)<br>
+<br>
+add_clang_library(clangProtoT<wbr>oCXX proto_to_cxx.cpp LINK_LIBS clangCXXProto)<br>
+<br>
+add_clang_executable(clang-pr<wbr>oto-to-cxx proto_to_cxx_main.cpp)<br>
+target_link_libraries(clang-p<wbr>roto-to-cxx clangProtoToCXX)<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/proto-to-cxx/proto_to_cxx.cpp?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/proto-to-cxx/proto_to_cxx<wbr>.cpp?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.cpp (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.cpp Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,102 @@<br>
+//==-- proto_to_cxx.cpp - Protobuf-C++ conversion --------------------------==//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+//<br>
+// Implements functions for converting between protobufs and C++.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+#include "proto_to_cxx.h"<br>
+#include "cxx_proto.pb.h"<br>
+<br>
+#include <ostream><br>
+#include <sstream><br>
+<br>
+namespace clang_fuzzer {<br>
+<br>
+// Forward decls.<br>
+std::ostream &operator<<(std::ostream &os, const BinaryOp &x);<br>
+std::ostream &operator<<(std::ostream &os, const StatementSeq &x);<br>
+<br>
+// Proto to C++.<br>
+std::ostream &operator<<(std::ostream &os, const Const &x) {<br>
+  return os << "(" << x.val() << ")";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const VarRef &x) {<br>
+  return os << "a[" << (static_cast<uint32_t>(x.varnu<wbr>m()) % 100) << "]";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const Lvalue &x) {<br>
+  return os << x.varref();<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const Rvalue &x) {<br>
+    if (x.has_varref()) return os << x.varref();<br>
+    if (x.has_cons())   return os << x.cons();<br>
+    if (x.has_binop())  return os << x.binop();<br>
+    return os << "1";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const BinaryOp &x) {<br>
+  os << "(" << x.left();<br>
+  switch (x.op()) {<br>
+    case BinaryOp::PLUS: os << "+"; break;<br>
+    case BinaryOp::MINUS: os << "-"; break;<br>
+    case BinaryOp::MUL: os << "*"; break;<br>
+    case BinaryOp::DIV: os << "/"; break;<br>
+    case BinaryOp::MOD: os << "%"; break;<br>
+    case BinaryOp::XOR: os << "^"; break;<br>
+    case BinaryOp::AND: os << "&"; break;<br>
+    case BinaryOp::OR: os << "|"; break;<br>
+    case BinaryOp::EQ: os << "=="; break;<br>
+    case BinaryOp::NE: os << "!="; break;<br>
+    case BinaryOp::LE: os << "<="; break;<br>
+    case BinaryOp::GE: os << ">="; break;<br>
+    case BinaryOp::LT: os << "<"; break;<br>
+    case BinaryOp::GT: os << ">"; break;<br>
+  }<br>
+  return os << x.right() << ")";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const AssignmentStatement &x) {<br>
+  return os << x.lvalue() << "=" << x.rvalue() << ";\n";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const IfElse &x) {<br>
+  return os << "if (" << x.cond() << "){\n"<br>
+            << x.if_body() << "} else { \n"<br>
+            << x.else_body() << "}\n";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const While &x) {<br>
+  return os << "while (" << x.cond() << "){\n" << x.body() << "}\n";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const Statement &x) {<br>
+  if (x.has_assignment()) return os << x.assignment();<br>
+  if (x.has_ifelse())     return os << x.ifelse();<br>
+  if (x.has_while_loop()) return os << x.while_loop();<br>
+  return os << "(void)0;\n";<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const StatementSeq &x) {<br>
+  for (auto &st : x.statements()) os << st;<br>
+  return os;<br>
+}<br>
+std::ostream &operator<<(std::ostream &os, const Function &x) {<br>
+  return os << "void foo(int *a) {\n" << x.statements() << "}\n";<br>
+}<br>
+<br>
+// ------------------------------<wbr>---<br>
+<br>
+std::string FunctionToString(const Function &input) {<br>
+  std::ostringstream os;<br>
+  os << input;<br>
+  return os.str();<br>
+<br>
+}<br>
+std::string ProtoToCxx(const uint8_t *data, size_t size) {<br>
+  Function message;<br>
+  if (!message.ParseFromArray(data, size))<br>
+    return "#error invalid proto\n";<br>
+  return FunctionToString(message);<br>
+}<br>
+<br>
+} // namespace clang_fuzzer<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.h<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/proto-to-cxx/proto_to_cxx.h?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/proto-to-cxx/proto_to_cxx<wbr>.h?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.h (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx.h Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,22 @@<br>
+//==-- proto_to_cxx.h - Protobuf-C++ conversion ----------------------------==<wbr>//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+//<br>
+// Defines functions for converting between protobufs and C++.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+<br>
+#include <cstdint><br>
+#include <cstddef><br>
+#include <string><br>
+<br>
+namespace clang_fuzzer {<br>
+class Function;<br>
+std::string FunctionToString(const Function &input);<br>
+std::string ProtoToCxx(const uint8_t *data, size_t size);<br>
+}<br>
<br>
Added: cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx_main.<wbr>cpp<br>
URL: <a href="http://llvm.org/viewvc/llvm-project/cfe/trunk/tools/clang-fuzzer/proto-to-cxx/proto_to_cxx_main.cpp?rev=310408&view=auto" rel="noreferrer" target="_blank">http://llvm.org/viewvc/llvm-pr<wbr>oject/cfe/trunk/tools/clang-fu<wbr>zzer/proto-to-cxx/proto_to_cxx<wbr>_main.cpp?rev=310408&view=auto</a><br>
==============================<wbr>==============================<wbr>==================<br>
--- cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx_main.<wbr>cpp (added)<br>
+++ cfe/trunk/tools/clang-fuzzer/p<wbr>roto-to-cxx/proto_to_cxx_main.<wbr>cpp Tue Aug  8 13:15:04 2017<br>
@@ -0,0 +1,30 @@<br>
+//==-- proto_to_cxx_main.cpp - Driver for protobuf-C++ conversion ----------==//<br>
+//<br>
+//                     The LLVM Compiler Infrastructure<br>
+//<br>
+// This file is distributed under the University of Illinois Open Source<br>
+// License. See LICENSE.TXT for details.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+//<br>
+// Implements a simple driver to print a C++ program from a protobuf.<br>
+//<br>
+//===------------------------<wbr>------------------------------<wbr>----------------===//<br>
+#include <fstream><br>
+#include <iostream><br>
+#include <streambuf><br>
+#include <string><br>
+<br>
+#include "proto_to_cxx.h"<br>
+<br>
+int main(int argc, char **argv) {<br>
+  for (int i = 1; i < argc; i++) {<br>
+    std::fstream in(argv[i]);<br>
+    std::string str((std::istreambuf_iterator<<wbr>char>(in)),<br>
+                    std::istreambuf_iterator<char><wbr>());<br>
+    std::cout << "// " << argv[i] << std::endl;<br>
+    std::cout << clang_fuzzer::ProtoToCxx(<br>
+        reinterpret_cast<const uint8_t *>(str.data()), str.size());<br>
+  }<br>
+}<br>
+<br>
<br>
<br>
______________________________<wbr>_________________<br>
cfe-commits mailing list<br>
<a href="mailto:cfe-commits@lists.llvm.org" target="_blank">cfe-commits@lists.llvm.org</a><br>
<a href="http://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits" rel="noreferrer" target="_blank">http://lists.llvm.org/cgi-bin/<wbr>mailman/listinfo/cfe-commits</a><br>
</blockquote></div></div>
</div></div><br>______________________________<wbr>_________________<br>
cfe-commits mailing list<br>
<a href="mailto:cfe-commits@lists.llvm.org">cfe-commits@lists.llvm.org</a><br>
<a href="http://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits" rel="noreferrer" target="_blank">http://lists.llvm.org/cgi-bin/<wbr>mailman/listinfo/cfe-commits</a><br>
<br></blockquote></div><br></div></div>