srg-imperial / grayc Goto Github PK
View Code? Open in Web Editor NEWGrayC: Greybox Fuzzing of Compilers and Analysers for C
Home Page: https://srg.doc.ic.ac.uk/projects/grayc/
GrayC: Greybox Fuzzing of Compilers and Analysers for C
Home Page: https://srg.doc.ic.ac.uk/projects/grayc/
Hi @arindam-8 .
Here's a simple example, test.c:
int main
{
a = 1;
}
Initially, I compiled it (gcc test.c
) on an Ubuntu system without full-width single quotation marks (‘
). The output was as follows:
test.c: In function 'main':
test.c:3:5: error: 'a' undeclared (first use in this function)
3 | a = 1;
| ^
test.c:3:5: note: each undeclared identifier is reported only once for each function it appears in
The In function 'main':
in this case uses a half-width single quotation mark.
However, when I switched to an Ubuntu system with Chinese language support (which includes full-width single quotation marks ‘
), and recompiled it (gcc test.c
), the output changed to:
test.c: In function ‘main’:
test.c:3:5: error: ‘a’ undeclared (first use in this function)
a = 1;
^
test.c:3:5: note: each undeclared identifier is reported only once for each function it appears in
The In function ‘main’:
in this case uses a full-width single quotation mark.
I apologize for the previous commit, which was incorrect. I think the original -ve "In function ‘bug’:"
should be retained, and we can add -ve "In function 'bug':"
after it to enhance the robustness of the program.
Originally posted by @Vanish-Zeng in #4 (comment)
There may be other string matching or similar changes that can enhance the robustness of the helper scripts. Feel free to contribute additional suggestions.
Hi, I noticed that this codebase has some inconsistencies with your paper.
For example, I couldn't find the actual delete operations in the code, which illustrated in your paper to delete sub-expressions from a given expression in a corpus program.
I list the mutator file you guys showed in this project:
utils-fuzzer
assignment-mutator
constant-mutator
delete-mutator
duplicate-mutator
expression-mutator
function-extractor
function-merger
jump-mutator
rename-transform
append-expression
extract-expression
global-extractor
I check the delete-mutator (about statement) and expression-mutator (about expand expression), and they are both Unrelated.
Could you please clarify the relationship between the 'mutator file' and the 'mutator operation' as described in your paper? I am particularly interested in understanding how these two components are connected. Thank you.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.