forked from googleprojectzero/fuzzilli
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Storage.swift
186 lines (159 loc) · 7.78 KB
/
Storage.swift
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
// Copyright 2019 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
import Foundation
/// Module to store programs to disk.
public class Storage: Module {
private let storageDir: String
private let crashesDir: String
private let duplicateCrashesDir: String
private let corpusDir: String
private let statisticsDir: String
private let stateFile: String
private let failedDir: String
private let timeOutDir: String
private let diagnosticsDir: String
private let statisticsExportInterval: Double?
private unowned let fuzzer: Fuzzer
private let logger: Logger
public init(for fuzzer: Fuzzer, storageDir: String, statisticsExportInterval: Double? = nil) {
self.storageDir = storageDir
self.crashesDir = storageDir + "/crashes"
self.duplicateCrashesDir = storageDir + "/crashes/duplicates"
self.corpusDir = storageDir + "/corpus"
self.failedDir = storageDir + "/failed"
self.timeOutDir = storageDir + "/timeouts"
self.statisticsDir = storageDir + "/stats"
self.stateFile = storageDir + "/state.bin"
self.diagnosticsDir = storageDir + "/diagnostics"
self.statisticsExportInterval = statisticsExportInterval
self.fuzzer = fuzzer
self.logger = Logger(withLabel: "Storage")
}
public func initialize(with fuzzer: Fuzzer) {
do {
try FileManager.default.createDirectory(atPath: crashesDir, withIntermediateDirectories: true)
try FileManager.default.createDirectory(atPath: duplicateCrashesDir, withIntermediateDirectories: true)
try FileManager.default.createDirectory(atPath: corpusDir, withIntermediateDirectories: true)
try FileManager.default.createDirectory(atPath: statisticsDir, withIntermediateDirectories: true)
if fuzzer.config.enableDiagnostics {
try FileManager.default.createDirectory(atPath: failedDir, withIntermediateDirectories: true)
try FileManager.default.createDirectory(atPath: timeOutDir, withIntermediateDirectories: true)
try FileManager.default.createDirectory(atPath: diagnosticsDir, withIntermediateDirectories: true)
}
} catch {
logger.fatal("Failed to create storage directories. Is \(storageDir) writable by the current user?")
}
fuzzer.registerEventListener(for: fuzzer.events.CrashFound) { ev in
let filename = "program_\(self.formatDate())_\(ev.program.id)_\(ev.behaviour.rawValue)_\(ev.signal)"
if ev.isUnique {
self.storeProgram(ev.program, as: filename, in: self.crashesDir)
} else {
self.storeProgram(ev.program, as: filename, in: self.duplicateCrashesDir)
}
}
fuzzer.registerEventListener(for: fuzzer.events.InterestingProgramFound) { ev in
let filename = "program_\(self.formatDate())_\(ev.program.id)"
self.storeProgram(ev.program, as: filename, in: self.corpusDir)
}
if fuzzer.config.enableDiagnostics {
fuzzer.registerEventListener(for: fuzzer.events.DiagnosticsEvent) { ev in
let filename = "\(self.formatDate())_\(ev.name)_\(String(currentMillis()))"
let url = URL(fileURLWithPath: self.diagnosticsDir + filename + ".diag")
self.createFile(url, withContent: ev.content)
}
fuzzer.registerEventListener(for: fuzzer.events.InvalidProgramFound) { program in
let filename = "program_\(self.formatDate())_\(program.id)"
self.storeProgram(program, as: filename, in: self.failedDir)
}
fuzzer.registerEventListener(for: fuzzer.events.TimeOutFound) { program in
let filename = "program_\(self.formatDate())_\(program.id)"
self.storeProgram(program, as: filename, in: self.timeOutDir)
}
}
// If enabled, export fuzzing statistics to disk in regular intervals.
if let interval = statisticsExportInterval {
guard let stats = Statistics.instance(for: fuzzer) else {
logger.fatal("Requested stats export but no Statistics module is active")
}
fuzzer.timers.scheduleTask(every: interval) { self.saveStatistics(stats) }
fuzzer.registerEventListener(for: fuzzer.events.Shutdown) { _ in self.saveStatistics(stats) }
}
}
private func createFile(_ url: URL, withContent content: String) {
do {
try content.write(to: url, atomically: false, encoding: String.Encoding.utf8)
} catch {
logger.error("Failed to write file \(url): \(error)")
}
}
private func createFile(_ url: URL, withContent content: Data) {
do {
try content.write(to: url)
} catch {
logger.error("Failed to write file \(url): \(error)")
}
}
private func storeProgram(_ program: Program, as filename: String, in directory: String) {
// Always include comments when writing programs to disk
var options = LiftingOptions.includeComments
// If enabled, also include type information
if fuzzer.config.inspection.contains(.types) {
options.insert(.dumpTypes)
}
let code = fuzzer.lifter.lift(program, withOptions: options)
let url = URL(fileURLWithPath: "\(directory)/\(filename).js")
createFile(url, withContent: code)
// Also store the FuzzIL program in its protobuf format. This can later be imported again or inspected using the FuzzILTool
do {
let pb = try program.asProtobuf().serializedData()
let url = URL(fileURLWithPath: "\(directory)/\(filename).fuzzil.protobuf")
createFile(url, withContent: pb)
} catch {
logger.warning("Failed to serialize program to protobuf: \(error)")
}
// If inspection is enabled, we also include the programs ancestor chain in a separate .history file
if fuzzer.config.inspection.contains(.history) && program.parent != nil {
let lifter = FuzzILLifter()
var ancestors: [Program] = []
var current: Program? = program
while current != nil {
ancestors.append(current!)
current = current?.parent
}
ancestors.reverse()
var content = ""
for program in ancestors {
content += "// ===== [ Program \(program.id) ] =====\n"
content += lifter.lift(program, withOptions: options) + "\n\n"
}
let url = URL(fileURLWithPath: "\(directory)/\(filename).fuzzil.history")
createFile(url, withContent: content)
}
}
private func saveStatistics(_ stats: Statistics) {
let statsData = stats.compute()
do {
let data = try statsData.jsonUTF8Data()
let url = URL(fileURLWithPath: "\(self.statisticsDir)/\(formatDate()).json")
try data.write(to: url)
} catch {
logger.error("Failed to write statistics to disk: \(error)")
}
}
private func formatDate() -> String {
let formatter = DateFormatter()
formatter.dateFormat = "yyyyMMddHHmmss"
return formatter.string(from: Date())
}
}