notebooks/PICS/SymbolicFuzzer-synopsis-1.svg

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
 "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<!-- Generated by graphviz version 12.1.1 (20240910.0053)
 -->
<!-- Pages: 1 -->
<svg width="300pt" height="402pt"
 viewBox="0.00 0.00 300.00 401.75" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 397.75)">
<g id="a_graph0"><a xlink:title="SymbolicFuzzer class hierarchy">
<polygon fill="white" stroke="none" points="-4,4 -4,-397.75 296,-397.75 296,4 -4,4"/>
</a>
</g>
<!-- SymbolicFuzzer -->
<g id="node1" class="node">
<title>SymbolicFuzzer</title>
<g id="a_node1"><a xlink:href="#" xlink:title="class SymbolicFuzzer:&#10;Symbolic fuzzing with reassignments and loop unrolling">
<polygon fill="none" stroke="black" points="0.38,-0.5 0.38,-98.25 154.38,-98.25 154.38,-0.5 0.38,-0.5"/>
<text text-anchor="start" x="28.62" y="-81.95" font-family="Patua One, Helvetica, sans-serif" font-weight="bold" font-size="14.00" fill="#b03a2e">SymbolicFuzzer</text>
<polyline fill="none" stroke="black" points="0.38,-72.25 154.38,-72.25"/>
<g id="a_node1_0"><a xlink:href="#" xlink:title="SymbolicFuzzer">
<g id="a_node1_1"><a xlink:href="#" xlink:title="extract_constraints(self, path)">
<text text-anchor="start" x="8.38" y="-59.75" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">extract_constraints()</text>
</a>
</g>
<g id="a_node1_2"><a xlink:href="#" xlink:title="get_all_paths(self, fenter)">
<text text-anchor="start" x="8.38" y="-47" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">get_all_paths()</text>
</a>
</g>
<g id="a_node1_3"><a xlink:href="#" xlink:title="get_next_path(self)">
<text text-anchor="start" x="8.38" y="-34.25" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">get_next_path()</text>
</a>
</g>
<g id="a_node1_4"><a xlink:href="#" xlink:title="options(self, kwargs)">
<text text-anchor="start" x="8.38" y="-21.5" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">options()</text>
</a>
</g>
<g id="a_node1_5"><a xlink:href="#" xlink:title="solve_path_constraint(self, path)">
<text text-anchor="start" x="8.38" y="-8.75" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">solve_path_constraint()</text>
</a>
</g>
</a>
</g>
</a>
</g>
</g>
<!-- SimpleSymbolicFuzzer -->
<g id="node2" class="node">
<title>SimpleSymbolicFuzzer</title>
<g id="a_node2"><a xlink:href="#" xlink:title="class SimpleSymbolicFuzzer:&#10;Simple symbolic fuzzer">
<polygon fill="none" stroke="black" points="0,-135.25 0,-271.25 154.75,-271.25 154.75,-135.25 0,-135.25"/>
<text text-anchor="start" x="8" y="-254.95" font-family="Patua One, Helvetica, sans-serif" font-weight="bold" font-size="14.00" fill="#b03a2e">SimpleSymbolicFuzzer</text>
<polyline fill="none" stroke="black" points="0,-245.25 154.75,-245.25"/>
<g id="a_node2_6"><a xlink:href="#" xlink:title="SimpleSymbolicFuzzer">
<g id="a_node2_7"><a xlink:href="#" xlink:title="__init__(self, fn, **kwargs):&#10;Constructor.&#10;`fn` is the function to be fuzzed.&#10;Possible keyword parameters:&#10;* `max_depth` &#45; the depth to which one should attempt&#10;to trace the execution (default 100)&#10;* `max_tries` &#45; the maximum number of attempts&#10;we will try to produce a value before giving up (default 100)&#10;* `max_iter` &#45; the number of iterations we will attempt (default 100).">
<text text-anchor="start" x="8.38" y="-232.75" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-style="italic" font-size="10.00">__init__()</text>
</a>
</g>
<g id="a_node2_8"><a xlink:href="#" xlink:title="fuzz(self):&#10;Produce one solution for each path.&#10;Returns a mapping of variable names to (symbolic) Z3 values.">
<text text-anchor="start" x="8.38" y="-220" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-style="italic" font-size="10.00">fuzz()</text>
</a>
</g>
<g id="a_node2_9"><a xlink:href="#" xlink:title="extract_constraints(self, path)">
<text text-anchor="start" x="8.38" y="-207.25" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">extract_constraints()</text>
</a>
</g>
<g id="a_node2_10"><a xlink:href="#" xlink:title="get_all_paths(self, fenter, depth=0)">
<text text-anchor="start" x="8.38" y="-194.5" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">get_all_paths()</text>
</a>
</g>
<g id="a_node2_11"><a xlink:href="#" xlink:title="get_next_path(self)">
<text text-anchor="start" x="8.38" y="-181.75" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">get_next_path()</text>
</a>
</g>
<g id="a_node2_12"><a xlink:href="#" xlink:title="options(self, kwargs)">
<text text-anchor="start" x="8.38" y="-169" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">options()</text>
</a>
</g>
<g id="a_node2_13"><a xlink:href="#" xlink:title="process(self)">
<text text-anchor="start" x="8.38" y="-155.25" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-size="10.00">process()</text>
</a>
</g>
<g id="a_node2_14"><a xlink:href="#" xlink:title="solve_path_constraint(self, path)">
<text text-anchor="start" x="8.38" y="-143.5" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="10.00">solve_path_constraint()</text>
</a>
</g>
</a>
</g>
</a>
</g>
</g>
<!-- SymbolicFuzzer&#45;&gt;SimpleSymbolicFuzzer -->
<g id="edge1" class="edge">
<title>SymbolicFuzzer&#45;&gt;SimpleSymbolicFuzzer</title>
<path fill="none" stroke="black" d="M77.38,-98.43C77.38,-106.47 77.38,-114.99 77.38,-123.55"/>
<polygon fill="none" stroke="black" points="73.88,-123.29 77.38,-133.29 80.88,-123.29 73.88,-123.29"/>
</g>
<!-- Fuzzer -->
<g id="node3" class="node">
<title>Fuzzer</title>
<g id="a_node3"><a xlink:href="Fuzzer.ipynb" xlink:title="class Fuzzer:&#10;Base class for fuzzers.">
<polygon fill="none" stroke="black" points="39.38,-308.25 39.38,-393.25 115.38,-393.25 115.38,-308.25 39.38,-308.25"/>
<text text-anchor="start" x="56.75" y="-376.95" font-family="Patua One, Helvetica, sans-serif" font-weight="bold" font-size="14.00" fill="#b03a2e">Fuzzer</text>
<polyline fill="none" stroke="black" points="39.38,-367.25 115.38,-367.25"/>
<g id="a_node3_15"><a xlink:href="#" xlink:title="Fuzzer">
<g id="a_node3_16"><a xlink:href="Fuzzer.ipynb" xlink:title="__init__(self) &#45;&gt; None:&#10;Constructor">
<text text-anchor="start" x="47.38" y="-354.75" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-style="italic" font-size="10.00">__init__()</text>
</a>
</g>
<g id="a_node3_17"><a xlink:href="Fuzzer.ipynb" xlink:title="fuzz(self) &#45;&gt; str:&#10;Return fuzz input">
<text text-anchor="start" x="47.38" y="-342" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-style="italic" font-size="10.00">fuzz()</text>
</a>
</g>
<g id="a_node3_18"><a xlink:href="Fuzzer.ipynb" xlink:title="run(self, runner: Fuzzer.Runner = &lt;Fuzzer.Runner object&gt;) &#45;&gt; Tuple[subprocess.CompletedProcess, str]:&#10;Run `runner` with fuzz input">
<text text-anchor="start" x="47.38" y="-329.25" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-size="10.00">run()</text>
</a>
</g>
<g id="a_node3_19"><a xlink:href="Fuzzer.ipynb" xlink:title="runs(self, runner: Fuzzer.Runner = &lt;Fuzzer.PrintRunner object&gt;, trials: int = 10) &#45;&gt; List[Tuple[subprocess.CompletedProcess, str]]:&#10;Run `runner` with fuzz input, `trials` times">
<text text-anchor="start" x="47.38" y="-316.5" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-size="10.00">runs()</text>
</a>
</g>
</a>
</g>
</a>
</g>
</g>
<!-- SimpleSymbolicFuzzer&#45;&gt;Fuzzer -->
<g id="edge2" class="edge">
<title>SimpleSymbolicFuzzer&#45;&gt;Fuzzer</title>
<path fill="none" stroke="black" d="M77.38,-271.46C77.38,-279.97 77.38,-288.57 77.38,-296.81"/>
<polygon fill="none" stroke="black" points="73.88,-296.65 77.38,-306.65 80.88,-296.65 73.88,-296.65"/>
</g>
<!-- Legend -->
<g id="node4" class="node">
<title>Legend</title>
<text text-anchor="start" x="172.75" y="-65.38" font-family="Patua One, Helvetica, sans-serif" font-weight="bold" font-size="10.00" fill="#b03a2e">Legend</text>
<text text-anchor="start" x="172.75" y="-55.38" font-family="Patua One, Helvetica, sans-serif" font-size="10.00">• </text>
<text text-anchor="start" x="178.75" y="-55.38" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-weight="bold" font-size="8.00">public_method()</text>
<text text-anchor="start" x="172.75" y="-45.38" font-family="Patua One, Helvetica, sans-serif" font-size="10.00">• </text>
<text text-anchor="start" x="178.75" y="-45.38" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-size="8.00">private_method()</text>
<text text-anchor="start" x="172.75" y="-35.38" font-family="Patua One, Helvetica, sans-serif" font-size="10.00">• </text>
<text text-anchor="start" x="178.75" y="-35.38" font-family="'Fira Mono', 'Source Code Pro', 'Courier', monospace" font-style="italic" font-size="8.00">overloaded_method()</text>
<text text-anchor="start" x="172.75" y="-26.32" font-family="Helvetica,sans-Serif" font-size="9.00">Hover over names to see doc</text>
</g>
</g>
</svg>