// Copyright (c) 2019 Google LLC // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. #include "source/fuzz/transformation_composite_extract.h" #include "source/fuzz/instruction_descriptor.h" #include "test/fuzz/fuzz_test_util.h" namespace spvtools { namespace fuzz { namespace { TEST(TransformationCompositeExtractTest, BasicTest) { std::string shader = R"( OpCapability Shader %1 = OpExtInstImport "GLSL.std.450" OpMemoryModel Logical GLSL450 OpEntryPoint Fragment %4 "main" OpExecutionMode %4 OriginUpperLeft OpSource ESSL 310 OpName %4 "main" OpName %8 "a" OpName %10 "b" OpName %17 "FunnyPoint" OpMemberName %17 0 "x" OpMemberName %17 1 "y" OpMemberName %17 2 "z" OpName %19 "p" %2 = OpTypeVoid %3 = OpTypeFunction %2 %6 = OpTypeInt 32 1 %7 = OpTypePointer Function %6 %12 = OpTypeBool %16 = OpTypeFloat 32 %17 = OpTypeStruct %16 %16 %6 %81 = OpTypeStruct %17 %16 %18 = OpTypePointer Function %17 %20 = OpConstant %6 0 %23 = OpTypePointer Function %16 %26 = OpConstant %6 1 %30 = OpConstant %6 2 %80 = OpUndef %16 %4 = OpFunction %2 None %3 %5 = OpLabel %8 = OpVariable %7 Function %10 = OpVariable %7 Function %19 = OpVariable %18 Function %9 = OpLoad %6 %8 %11 = OpLoad %6 %10 %100 = OpCompositeConstruct %17 %80 %80 %26 %104 = OpCompositeConstruct %81 %100 %80 %13 = OpIEqual %12 %9 %11 OpSelectionMerge %15 None OpBranchConditional %13 %14 %25 %14 = OpLabel %21 = OpLoad %6 %8 %22 = OpConvertSToF %16 %21 %101 = OpCompositeConstruct %17 %22 %80 %30 %24 = OpAccessChain %23 %19 %20 OpStore %24 %22 OpBranch %15 %25 = OpLabel %27 = OpLoad %6 %10 %28 = OpConvertSToF %16 %27 %102 = OpCompositeConstruct %17 %80 %28 %27 %29 = OpAccessChain %23 %19 %26 OpStore %29 %28 OpBranch %15 %15 = OpLabel %31 = OpAccessChain %23 %19 %20 %32 = OpLoad %16 %31 %33 = OpAccessChain %23 %19 %26 %34 = OpLoad %16 %33 %103 = OpCompositeConstruct %17 %34 %32 %9 %35 = OpFAdd %16 %32 %34 %36 = OpConvertFToS %6 %35 %37 = OpAccessChain %7 %19 %30 OpStore %37 %36 OpReturn OpFunctionEnd )"; const auto env = SPV_ENV_UNIVERSAL_1_4; const auto consumer = nullptr; const auto context = BuildModule(env, consumer, shader, kFuzzAssembleOption); ASSERT_TRUE(IsValid(env, context.get())); FactManager fact_manager; // Instruction does not exist. ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(36, SpvOpIAdd, 0), 200, 101, {0}) .IsApplicable(context.get(), fact_manager)); // Id for composite is not a composite. ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(36, SpvOpIAdd, 0), 200, 27, {}) .IsApplicable(context.get(), fact_manager)); // Composite does not dominate instruction being inserted before. ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(37, SpvOpAccessChain, 0), 200, 101, {0}) .IsApplicable(context.get(), fact_manager)); // Too many indices for extraction from struct composite. ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(24, SpvOpAccessChain, 0), 200, 101, {0, 0}) .IsApplicable(context.get(), fact_manager)); // Too many indices for extraction from struct composite. ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(13, SpvOpIEqual, 0), 200, 104, {0, 0, 0}) .IsApplicable(context.get(), fact_manager)); // Out of bounds index for extraction from struct composite. ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(13, SpvOpIEqual, 0), 200, 104, {0, 3}) .IsApplicable(context.get(), fact_manager)); // Result id already used. ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(35, SpvOpFAdd, 0), 80, 103, {0}) .IsApplicable(context.get(), fact_manager)); TransformationCompositeExtract transformation_1( MakeInstructionDescriptor(36, SpvOpConvertFToS, 0), 201, 100, {2}); ASSERT_TRUE(transformation_1.IsApplicable(context.get(), fact_manager)); transformation_1.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); TransformationCompositeExtract transformation_2( MakeInstructionDescriptor(37, SpvOpAccessChain, 0), 202, 104, {0, 2}); ASSERT_TRUE(transformation_2.IsApplicable(context.get(), fact_manager)); transformation_2.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); TransformationCompositeExtract transformation_3( MakeInstructionDescriptor(29, SpvOpAccessChain, 0), 203, 104, {0}); ASSERT_TRUE(transformation_3.IsApplicable(context.get(), fact_manager)); transformation_3.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); TransformationCompositeExtract transformation_4( MakeInstructionDescriptor(24, SpvOpStore, 0), 204, 101, {0}); ASSERT_TRUE(transformation_4.IsApplicable(context.get(), fact_manager)); transformation_4.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); TransformationCompositeExtract transformation_5( MakeInstructionDescriptor(29, SpvOpBranch, 0), 205, 102, {2}); ASSERT_TRUE(transformation_5.IsApplicable(context.get(), fact_manager)); transformation_5.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); TransformationCompositeExtract transformation_6( MakeInstructionDescriptor(37, SpvOpReturn, 0), 206, 103, {1}); ASSERT_TRUE(transformation_6.IsApplicable(context.get(), fact_manager)); transformation_6.Apply(context.get(), &fact_manager); ASSERT_TRUE(IsValid(env, context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(201, {}), MakeDataDescriptor(100, {2}), context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(202, {}), MakeDataDescriptor(104, {0, 2}), context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(203, {}), MakeDataDescriptor(104, {0}), context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(204, {}), MakeDataDescriptor(101, {0}), context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(205, {}), MakeDataDescriptor(102, {2}), context.get())); ASSERT_TRUE(fact_manager.IsSynonymous(MakeDataDescriptor(206, {}), MakeDataDescriptor(103, {1}), context.get())); std::string after_transformation = R"( OpCapability Shader %1 = OpExtInstImport "GLSL.std.450" OpMemoryModel Logical GLSL450 OpEntryPoint Fragment %4 "main" OpExecutionMode %4 OriginUpperLeft OpSource ESSL 310 OpName %4 "main" OpName %8 "a" OpName %10 "b" OpName %17 "FunnyPoint" OpMemberName %17 0 "x" OpMemberName %17 1 "y" OpMemberName %17 2 "z" OpName %19 "p" %2 = OpTypeVoid %3 = OpTypeFunction %2 %6 = OpTypeInt 32 1 %7 = OpTypePointer Function %6 %12 = OpTypeBool %16 = OpTypeFloat 32 %17 = OpTypeStruct %16 %16 %6 %81 = OpTypeStruct %17 %16 %18 = OpTypePointer Function %17 %20 = OpConstant %6 0 %23 = OpTypePointer Function %16 %26 = OpConstant %6 1 %30 = OpConstant %6 2 %80 = OpUndef %16 %4 = OpFunction %2 None %3 %5 = OpLabel %8 = OpVariable %7 Function %10 = OpVariable %7 Function %19 = OpVariable %18 Function %9 = OpLoad %6 %8 %11 = OpLoad %6 %10 %100 = OpCompositeConstruct %17 %80 %80 %26 %104 = OpCompositeConstruct %81 %100 %80 %13 = OpIEqual %12 %9 %11 OpSelectionMerge %15 None OpBranchConditional %13 %14 %25 %14 = OpLabel %21 = OpLoad %6 %8 %22 = OpConvertSToF %16 %21 %101 = OpCompositeConstruct %17 %22 %80 %30 %24 = OpAccessChain %23 %19 %20 %204 = OpCompositeExtract %16 %101 0 OpStore %24 %22 OpBranch %15 %25 = OpLabel %27 = OpLoad %6 %10 %28 = OpConvertSToF %16 %27 %102 = OpCompositeConstruct %17 %80 %28 %27 %203 = OpCompositeExtract %17 %104 0 %29 = OpAccessChain %23 %19 %26 OpStore %29 %28 %205 = OpCompositeExtract %6 %102 2 OpBranch %15 %15 = OpLabel %31 = OpAccessChain %23 %19 %20 %32 = OpLoad %16 %31 %33 = OpAccessChain %23 %19 %26 %34 = OpLoad %16 %33 %103 = OpCompositeConstruct %17 %34 %32 %9 %35 = OpFAdd %16 %32 %34 %201 = OpCompositeExtract %6 %100 2 %36 = OpConvertFToS %6 %35 %202 = OpCompositeExtract %6 %104 0 2 %37 = OpAccessChain %7 %19 %30 OpStore %37 %36 %206 = OpCompositeExtract %16 %103 1 OpReturn OpFunctionEnd )"; ASSERT_TRUE(IsEqual(env, after_transformation, context.get())); } TEST(TransformationCompositeExtractTest, IllegalInsertionPoints) { std::string shader = R"( OpCapability Shader %1 = OpExtInstImport "GLSL.std.450" OpMemoryModel Logical GLSL450 OpEntryPoint Fragment %4 "main" %51 %27 OpExecutionMode %4 OriginUpperLeft OpSource ESSL 310 OpName %4 "main" OpName %25 "buf" OpMemberName %25 0 "value" OpName %27 "" OpName %51 "color" OpMemberDecorate %25 0 Offset 0 OpDecorate %25 Block OpDecorate %27 DescriptorSet 0 OpDecorate %27 Binding 0 OpDecorate %51 Location 0 %2 = OpTypeVoid %3 = OpTypeFunction %2 %6 = OpTypeFloat 32 %7 = OpTypeVector %6 4 %10 = OpConstant %6 0.300000012 %11 = OpConstant %6 0.400000006 %12 = OpConstant %6 0.5 %13 = OpConstant %6 1 %14 = OpConstantComposite %7 %10 %11 %12 %13 %15 = OpTypeInt 32 1 %18 = OpConstant %15 0 %25 = OpTypeStruct %6 %26 = OpTypePointer Uniform %25 %27 = OpVariable %26 Uniform %28 = OpTypePointer Uniform %6 %32 = OpTypeBool %103 = OpConstantTrue %32 %34 = OpConstant %6 0.100000001 %48 = OpConstant %15 1 %50 = OpTypePointer Output %7 %51 = OpVariable %50 Output %100 = OpTypePointer Function %6 %4 = OpFunction %2 None %3 %5 = OpLabel %101 = OpVariable %100 Function %102 = OpVariable %100 Function OpBranch %19 %19 = OpLabel %60 = OpPhi %7 %14 %5 %58 %20 %59 = OpPhi %15 %18 %5 %49 %20 %29 = OpAccessChain %28 %27 %18 %30 = OpLoad %6 %29 %31 = OpConvertFToS %15 %30 %33 = OpSLessThan %32 %59 %31 OpLoopMerge %21 %20 None OpBranchConditional %33 %20 %21 %20 = OpLabel %39 = OpCompositeExtract %6 %60 0 %40 = OpFAdd %6 %39 %34 %55 = OpCompositeInsert %7 %40 %60 0 %44 = OpCompositeExtract %6 %60 1 %45 = OpFSub %6 %44 %34 %58 = OpCompositeInsert %7 %45 %55 1 %49 = OpIAdd %15 %59 %48 OpBranch %19 %21 = OpLabel OpStore %51 %60 OpSelectionMerge %105 None OpBranchConditional %103 %104 %105 %104 = OpLabel OpBranch %105 %105 = OpLabel OpReturn OpFunctionEnd )"; const auto env = SPV_ENV_UNIVERSAL_1_4; const auto consumer = nullptr; const auto context = BuildModule(env, consumer, shader, kFuzzAssembleOption); ASSERT_TRUE(IsValid(env, context.get())); FactManager fact_manager; // Cannot insert before the OpVariables of a function. ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(101, SpvOpVariable, 0), 200, 14, {0}) .IsApplicable(context.get(), fact_manager)); ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(101, SpvOpVariable, 1), 200, 14, {1}) .IsApplicable(context.get(), fact_manager)); ASSERT_FALSE( TransformationCompositeExtract( MakeInstructionDescriptor(102, SpvOpVariable, 0), 200, 14, {1}) .IsApplicable(context.get(), fact_manager)); // OK to insert right after the OpVariables. ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(102, SpvOpBranch, 1), 200, 14, {1}) .IsApplicable(context.get(), fact_manager)); // Cannot insert before the OpPhis of a block. ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(60, SpvOpPhi, 0), 200, 14, {2}) .IsApplicable(context.get(), fact_manager)); ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(59, SpvOpPhi, 0), 200, 14, {3}) .IsApplicable(context.get(), fact_manager)); // OK to insert after the OpPhis. ASSERT_TRUE( TransformationCompositeExtract( MakeInstructionDescriptor(59, SpvOpAccessChain, 0), 200, 14, {3}) .IsApplicable(context.get(), fact_manager)); // Cannot insert before OpLoopMerge ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(33, SpvOpBranchConditional, 0), 200, 14, {3}) .IsApplicable(context.get(), fact_manager)); // Cannot insert before OpSelectionMerge ASSERT_FALSE(TransformationCompositeExtract( MakeInstructionDescriptor(21, SpvOpBranchConditional, 0), 200, 14, {2}) .IsApplicable(context.get(), fact_manager)); } } // namespace } // namespace fuzz } // namespace spvtools