[libc-commits] [libc] [libc] sqrt and log functions fuzz tests (PR #148006)
via libc-commits
libc-commits at lists.llvm.org
Mon Jul 14 09:36:02 PDT 2025
https://github.com/sribee8 updated https://github.com/llvm/llvm-project/pull/148006
>From 129f09fe72e83cfc371c8586979b31c885e7c229 Mon Sep 17 00:00:00 2001
From: Sriya Pratipati <sriyap at google.com>
Date: Thu, 10 Jul 2025 17:12:06 +0000
Subject: [PATCH 1/4] [libc] sqrt and log functions fuzz tests
added fuzz tests for sqrt and log functions
---
libc/fuzzing/math/CMakeLists.txt | 45 +++++++++++++++++++++++++++++++
libc/fuzzing/math/log10_fuzz.cpp | 38 ++++++++++++++++++++++++++
libc/fuzzing/math/log1p_fuzz.cpp | 38 ++++++++++++++++++++++++++
libc/fuzzing/math/log2_fuzz.cpp | 38 ++++++++++++++++++++++++++
libc/fuzzing/math/log_fuzz.cpp | 38 ++++++++++++++++++++++++++
libc/fuzzing/math/sincos_fuzz.cpp | 2 +-
libc/fuzzing/math/sqrt_fuzz.cpp | 38 ++++++++++++++++++++++++++
7 files changed, 236 insertions(+), 1 deletion(-)
create mode 100644 libc/fuzzing/math/log10_fuzz.cpp
create mode 100644 libc/fuzzing/math/log1p_fuzz.cpp
create mode 100644 libc/fuzzing/math/log2_fuzz.cpp
create mode 100644 libc/fuzzing/math/log_fuzz.cpp
create mode 100644 libc/fuzzing/math/sqrt_fuzz.cpp
diff --git a/libc/fuzzing/math/CMakeLists.txt b/libc/fuzzing/math/CMakeLists.txt
index e3c29651917fc..06f8f024762b9 100644
--- a/libc/fuzzing/math/CMakeLists.txt
+++ b/libc/fuzzing/math/CMakeLists.txt
@@ -124,3 +124,48 @@ add_libc_fuzzer(
DEPENDS
libc.src.math.sincos
)
+
+add_libc_fuzzer(
+ log_fuzz
+ NEED_MPFR
+ SRCS
+ log_fuzz.cpp
+ DEPENDS
+ libc.src.math.log
+)
+
+add_libc_fuzzer(
+ log10_fuzz
+ NEED_MPFR
+ SRCS
+ log10_fuzz.cpp
+ DEPENDS
+ libc.src.math.log10
+)
+
+add_libc_fuzzer(
+ log1p_fuzz
+ NEED_MPFR
+ SRCS
+ log1p_fuzz.cpp
+ DEPENDS
+ libc.src.math.log1p
+)
+
+add_libc_fuzzer(
+ log2_fuzz
+ NEED_MPFR
+ SRCS
+ log2_fuzz.cpp
+ DEPENDS
+ libc.src.math.log2
+)
+
+add_libc_fuzzer(
+ sqrt_fuzz
+ NEED_MPFR
+ SRCS
+ sqrt_fuzz.cpp
+ DEPENDS
+ libc.src.math.sqrt
+)
diff --git a/libc/fuzzing/math/log10_fuzz.cpp b/libc/fuzzing/math/log10_fuzz.cpp
new file mode 100644
index 0000000000000..b5233588e83f8
--- /dev/null
+++ b/libc/fuzzing/math/log10_fuzz.cpp
@@ -0,0 +1,38 @@
+//===-- log10_fuzz.cpp ----------------------------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+///
+/// Fuzzing test for llvm-libc log10 implementation.
+///
+//===----------------------------------------------------------------------===//
+
+#include "src/math/log10.h"
+#include "utils/MPFRWrapper/mpfr_inc.h"
+#include <math.h>
+
+extern "C" int LLVMFuzzerTestOneInput(double x) {
+ // remove NaN and inf and values outside accepted range
+ if (isnan(x) || isinf(x) || x < 0)
+ return 0;
+ // signed zeros already tested in unit tests
+ if (signbit(x) && x == 0.0)
+ return 0;
+ mpfr_t input;
+ mpfr_init2(input, 53);
+ mpfr_set_d(input, x, MPFR_RNDN);
+ int output = mpfr_log10(input, input, MPFR_RNDN);
+ mpfr_subnormalize(input, output, MPFR_RNDN);
+ double to_compare = mpfr_get_d(input, MPFR_RNDN);
+
+ double result = LIBC_NAMESPACE::log10(x);
+
+ if (result != to_compare)
+ __builtin_trap();
+
+ mpfr_clear(input);
+ return 0;
+}
diff --git a/libc/fuzzing/math/log1p_fuzz.cpp b/libc/fuzzing/math/log1p_fuzz.cpp
new file mode 100644
index 0000000000000..c40aad018794f
--- /dev/null
+++ b/libc/fuzzing/math/log1p_fuzz.cpp
@@ -0,0 +1,38 @@
+//===-- log1p_fuzz.cpp ----------------------------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+///
+/// Fuzzing test for llvm-libc log1p implementation.
+///
+//===----------------------------------------------------------------------===//
+
+#include "src/math/log1p.h"
+#include "utils/MPFRWrapper/mpfr_inc.h"
+#include <math.h>
+
+extern "C" int LLVMFuzzerTestOneInput(double x) {
+ // remove NaN and inf and values outside accepted range
+ if (isnan(x) || isinf(x) || x < 0)
+ return 0;
+ // signed zeros already tested in unit tests
+ if (signbit(x) && x == 0.0)
+ return 0;
+ mpfr_t input;
+ mpfr_init2(input, 53);
+ mpfr_set_d(input, x, MPFR_RNDN);
+ int output = mpfr_log1p(input, input, MPFR_RNDN);
+ mpfr_subnormalize(input, output, MPFR_RNDN);
+ double to_compare = mpfr_get_d(input, MPFR_RNDN);
+
+ double result = LIBC_NAMESPACE::log1p(x);
+
+ if (result != to_compare)
+ __builtin_trap();
+
+ mpfr_clear(input);
+ return 0;
+}
diff --git a/libc/fuzzing/math/log2_fuzz.cpp b/libc/fuzzing/math/log2_fuzz.cpp
new file mode 100644
index 0000000000000..3a7d9956b4bea
--- /dev/null
+++ b/libc/fuzzing/math/log2_fuzz.cpp
@@ -0,0 +1,38 @@
+//===-- log2_fuzz.cpp -----------------------------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+///
+/// Fuzzing test for llvm-libc log2 implementation.
+///
+//===----------------------------------------------------------------------===//
+
+#include "src/math/log2.h"
+#include "utils/MPFRWrapper/mpfr_inc.h"
+#include <math.h>
+
+extern "C" int LLVMFuzzerTestOneInput(double x) {
+ // remove NaN and inf and values outside accepted range
+ if (isnan(x) || isinf(x) || x < 0)
+ return 0;
+ // signed zeros already tested in unit tests
+ if (signbit(x) && x == 0.0)
+ return 0;
+ mpfr_t input;
+ mpfr_init2(input, 53);
+ mpfr_set_d(input, x, MPFR_RNDN);
+ int output = mpfr_log2(input, input, MPFR_RNDN);
+ mpfr_subnormalize(input, output, MPFR_RNDN);
+ double to_compare = mpfr_get_d(input, MPFR_RNDN);
+
+ double result = LIBC_NAMESPACE::log2(x);
+
+ if (result != to_compare)
+ __builtin_trap();
+
+ mpfr_clear(input);
+ return 0;
+}
diff --git a/libc/fuzzing/math/log_fuzz.cpp b/libc/fuzzing/math/log_fuzz.cpp
new file mode 100644
index 0000000000000..1271fb73fd1a0
--- /dev/null
+++ b/libc/fuzzing/math/log_fuzz.cpp
@@ -0,0 +1,38 @@
+//===-- log_fuzz.cpp ------------------------------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+///
+/// Fuzzing test for llvm-libc log implementation.
+///
+//===----------------------------------------------------------------------===//
+
+#include "src/math/log.h"
+#include "utils/MPFRWrapper/mpfr_inc.h"
+#include <math.h>
+
+extern "C" int LLVMFuzzerTestOneInput(double x) {
+ // remove NaN and inf and values outside accepted range
+ if (isnan(x) || isinf(x) || x < 0)
+ return 0;
+ // signed zeros already tested in unit tests
+ if (signbit(x) && x == 0.0)
+ return 0;
+ mpfr_t input;
+ mpfr_init2(input, 53);
+ mpfr_set_d(input, x, MPFR_RNDN);
+ int output = mpfr_log(input, input, MPFR_RNDN);
+ mpfr_subnormalize(input, output, MPFR_RNDN);
+ double to_compare = mpfr_get_d(input, MPFR_RNDN);
+
+ double result = LIBC_NAMESPACE::log(x);
+
+ if (result != to_compare)
+ __builtin_trap();
+
+ mpfr_clear(input);
+ return 0;
+}
diff --git a/libc/fuzzing/math/sincos_fuzz.cpp b/libc/fuzzing/math/sincos_fuzz.cpp
index 8cc6f7291a3df..fd3dfae23168c 100644
--- a/libc/fuzzing/math/sincos_fuzz.cpp
+++ b/libc/fuzzing/math/sincos_fuzz.cpp
@@ -6,7 +6,7 @@
//
//===----------------------------------------------------------------------===//
///
-/// Fuzzing test for llvm-libc cos implementation.
+/// Fuzzing test for llvm-libc sincos implementation.
///
//===----------------------------------------------------------------------===//
diff --git a/libc/fuzzing/math/sqrt_fuzz.cpp b/libc/fuzzing/math/sqrt_fuzz.cpp
new file mode 100644
index 0000000000000..48e17f481a256
--- /dev/null
+++ b/libc/fuzzing/math/sqrt_fuzz.cpp
@@ -0,0 +1,38 @@
+//===-- sqrt_fuzz.cpp -----------------------------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+///
+/// Fuzzing test for llvm-libc sqrt implementation.
+///
+//===----------------------------------------------------------------------===//
+
+#include "src/math/sqrt.h"
+#include "utils/MPFRWrapper/mpfr_inc.h"
+#include <math.h>
+
+extern "C" int LLVMFuzzerTestOneInput(double x) {
+ // remove NaN and inf and values outside accepted range
+ if (isnan(x) || isinf(x) || x < 0)
+ return 0;
+ // signed zeros already tested in unit tests
+ if (signbit(x) && x == 0.0)
+ return 0;
+ mpfr_t input;
+ mpfr_init2(input, 53);
+ mpfr_set_d(input, x, MPFR_RNDN);
+ int output = mpfr_sqrt(input, input, MPFR_RNDN);
+ mpfr_subnormalize(input, output, MPFR_RNDN);
+ double to_compare = mpfr_get_d(input, MPFR_RNDN);
+
+ double result = LIBC_NAMESPACE::sqrt(x);
+
+ if (result != to_compare)
+ __builtin_trap();
+
+ mpfr_clear(input);
+ return 0;
+}
>From d05a5baedfee2faf890dbb98451c9113136c7ce3 Mon Sep 17 00:00:00 2001
From: Sriya Pratipati <sriyap at google.com>
Date: Thu, 10 Jul 2025 21:20:29 +0000
Subject: [PATCH 2/4] changed to test internal sqrt
---
libc/fuzzing/math/sqrt_fuzz.cpp | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/libc/fuzzing/math/sqrt_fuzz.cpp b/libc/fuzzing/math/sqrt_fuzz.cpp
index 48e17f481a256..4f5f165a1e0f2 100644
--- a/libc/fuzzing/math/sqrt_fuzz.cpp
+++ b/libc/fuzzing/math/sqrt_fuzz.cpp
@@ -10,7 +10,7 @@
///
//===----------------------------------------------------------------------===//
-#include "src/math/sqrt.h"
+#include "src/__support/FPUtil/generic/sqrt.h"
#include "utils/MPFRWrapper/mpfr_inc.h"
#include <math.h>
@@ -28,7 +28,7 @@ extern "C" int LLVMFuzzerTestOneInput(double x) {
mpfr_subnormalize(input, output, MPFR_RNDN);
double to_compare = mpfr_get_d(input, MPFR_RNDN);
- double result = LIBC_NAMESPACE::sqrt(x);
+ double result = LIBC_NAMESPACE::fputil::sqrt<double>(x);
if (result != to_compare)
__builtin_trap();
>From 4db3dfe12e94a51effa3fd4697a66a6bc747e07d Mon Sep 17 00:00:00 2001
From: Sriya Pratipati <sriyap at google.com>
Date: Thu, 10 Jul 2025 21:26:38 +0000
Subject: [PATCH 3/4] updated cmake with correct dependancy
---
libc/fuzzing/math/CMakeLists.txt | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libc/fuzzing/math/CMakeLists.txt b/libc/fuzzing/math/CMakeLists.txt
index 06f8f024762b9..cbe4a278b6b70 100644
--- a/libc/fuzzing/math/CMakeLists.txt
+++ b/libc/fuzzing/math/CMakeLists.txt
@@ -167,5 +167,5 @@ add_libc_fuzzer(
SRCS
sqrt_fuzz.cpp
DEPENDS
- libc.src.math.sqrt
+ libc.src.__support.FPUtil.generic.sqrt
)
>From b83fcf37484679faedc651bd564a0a85d313947e Mon Sep 17 00:00:00 2001
From: Sriya Pratipati <sriyap at google.com>
Date: Mon, 14 Jul 2025 16:35:45 +0000
Subject: [PATCH 4/4] updated condition
---
libc/fuzzing/math/log1p_fuzz.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libc/fuzzing/math/log1p_fuzz.cpp b/libc/fuzzing/math/log1p_fuzz.cpp
index c40aad018794f..108baf5c6160c 100644
--- a/libc/fuzzing/math/log1p_fuzz.cpp
+++ b/libc/fuzzing/math/log1p_fuzz.cpp
@@ -16,7 +16,7 @@
extern "C" int LLVMFuzzerTestOneInput(double x) {
// remove NaN and inf and values outside accepted range
- if (isnan(x) || isinf(x) || x < 0)
+ if (isnan(x) || isinf(x) || x < -1)
return 0;
// signed zeros already tested in unit tests
if (signbit(x) && x == 0.0)
More information about the libc-commits
mailing list