Adding code

.gitignore

@@ -0,0 +1,152 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+.pnpm-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional stylelint cache
+.stylelintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variable files
+.env
+.env.development.local
+.env.test.local
+.env.production.local
+.env.local
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+out
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and not Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# vuepress v2.x temp and cache directory
+.temp
+.cache
+
+# Docusaurus cache and generated files
+.docusaurus
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# TernJS port file
+.tern-port
+
+# Stores VSCode versions used for testing VSCode extensions
+.vscode-test
+
+# yarn v2
+.yarn/cache
+.yarn/unplugged
+.yarn/build-state.yml
+.yarn/install-state.gz
+.pnp.*
+
+
+# python
+*.pyc
+*.pyo
+*.pyd
+__pycache__/
+.pytest_cache/
+.pyenv/
+
+# Odoo config
+odoo_config.cfg
+
+# Build files
+build/
+dist/
+*.egg-info/
+
+# Generated files
+addons/**/generated/
+addons/**/failed/
+addons/**/report/

.vscode/launch.json

@@ -0,0 +1,17 @@
+{
+    // Use IntelliSense to learn about possible attributes.
+    // Hover to view descriptions of existing attributes.
+    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": "Python Debugger: Current File with Arguments",
+            "type": "debugpy",
+            "request": "launch",
+            "program": "./fuzze/",
+            "console": "integratedTerminal",
+            "args": "--destination ./addons/fuzze --name main_flow_tour --source ..\\odoo\\odoo\\addons\\test_main_flows\\static\\tests\\tours\\main_flow.js --strategy index --exclude 1 2 12 13 14 --iterations 10"
+            ,"justMyCode": false
+        }
+    ]
+}

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Gabriel Benoit
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,17 @@
+# Fuzze
+
+Fuzzee is a grammar based fuzzer for the Odoo web interface.
+
+## Installation
+
+To install the tool, the build script can be used. Run the following command to install the tool as a module in the current user's profile:
+
+```pwsh
+pwsh ./build.ps1
+```
+
+## Run the evaluation
+
+To make mutants of a tour, several scripts are available in the `scripts` directory. Each script is a stub for the main flow tour using each strategy of the tool.
+
+After the mutants are generated, simply run odoo using the config file `odoo_config.cfg` and add the argument `--test-tags fuzze` to run the tests.

addons/fuzze/__init__.py

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*-
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+from .models import model_multicompany
+
+
+#
+# Conditional installation of enterprise modules.
+#
+# This module is defined in community but some steps (defined with 'edition: "enterprise"')
+# are only used to test enterprise. As it's not possible to direcly add enterprise
+# modules dependencies, this post install hook will install account_accountant if exists.
+#
+def _auto_install_enterprise_dependencies(env):
+    module_list = ["account_accountant"]
+    module_ids = env["ir.module.module"].search(
+        [("name", "in", module_list), ("state", "=", "uninstalled")]
+    )
+    module_ids.sudo().button_install()

addons/fuzze/__manifest__.py

@@ -0,0 +1,20 @@
+# -*- coding: utf-8 -*-
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+# type: ignore
+{
+    "name": "fuzze",
+    "version": "0.1",
+    "category": "Hidden/Tests",
+    "summary": "GUI fuzzing for Odoo",
+    "description": """This modules provides a GUI fuzzing tool for Odoo. It depends on the Odoo tour tool.""",
+    "depends": ["test_main_flows"],
+    "post_init_hook": "_auto_install_enterprise_dependencies",
+    "data": ["models/ir.model.access.csv"],
+    "assets": {
+        "web.assets_tests": [
+            "fuzze/static/tests/tours/generated/*.js",
+        ],
+    },
+    "installable": True,
+    "license": "LGPL-3",
+}

addons/fuzze/models/ir.model.access.csv

@@ -0,0 +1,2 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+access_model_multicompany,access_model_multicompany,model_test_model_multicompany,base.group_user,1,0,0,0

addons/fuzze/models/model_multicompany.py

@@ -0,0 +1,9 @@
+from odoo import models, fields
+
+
+class ModelMultiCompany(models.Model):
+    _name = "test.model_multicompany"
+    _description = "test multicompany model"
+
+    name = fields.Char()
+    company_id = fields.Many2one("res.company")

addons/fuzze/tests/__init__.py

@@ -0,0 +1 @@
+from . import test_main_flow