440   FuzzChangeset *pParse,          /* Changeset parse object */  in fuzzParseHeader()  argument
447   u8 cHdr = (pParse->bPatchset ? 'P' : 'T');  in fuzzParseHeader()
532   FuzzChangeset *pParse,          /* Changeset parse context */  in fuzzParseRecord()  argument
536   FuzzChangesetGroup *pGrp = pParse->apGroup[pParse->nGroup-1];  in fuzzParseRecord()
544       if( (pParse->nVal & (pParse->nVal-1))==0 ){  in fuzzParseRecord()
545         int nNew = pParse->nVal ? pParse->nVal*2 : 4;  in fuzzParseRecord()
546         u8 **apNew = (u8**)sqlite3_realloc(pParse->apVal, nNew*sizeof(u8*));  in fuzzParseRecord()
548         pParse->apVal = apNew;  in fuzzParseRecord()
550       pParse->apVal[pParse->nVal++] = p;  in fuzzParseRecord()
572 static int fuzzParseChanges(u8 **ppData, u8 *pEnd, FuzzChangeset *pParse){  in fuzzParseChanges()  argument
573   u8 cHdr = (pParse->bPatchset ? 'P' : 'T');  in fuzzParseChanges()
574   FuzzChangesetGroup *pGrp = pParse->apGroup[pParse->nGroup-1];  in fuzzParseChanges()
585       pParse->nUpdate++;  in fuzzParseChanges()
586       if( pParse->bPatchset==0 ){  in fuzzParseChanges()
587         rc = fuzzParseRecord(&p, pEnd, pParse, 0);  in fuzzParseChanges()
593       int bPkOnly = (eOp==SQLITE_DELETE && pParse->bPatchset);  in fuzzParseChanges()
594       rc = fuzzParseRecord(&p, pEnd, pParse, bPkOnly);  in fuzzParseChanges()
597     pParse->nChange++;  in fuzzParseChanges()
614   FuzzChangeset *pParse           /* OUT: Results of parse */  in fuzzParseChangeset()  argument
620   memset(pParse, 0, sizeof(FuzzChangeset));  in fuzzParseChangeset()
622     pParse->bPatchset = (pChangeset[0]=='P');  in fuzzParseChangeset()
629     rc = fuzzParseHeader(pParse, &p, pEnd, &pGrp);  in fuzzParseChangeset()
636           pParse->apGroup, sizeof(FuzzChangesetGroup*)*(pParse->nGroup+1)  in fuzzParseChangeset()
641         apNew[pParse->nGroup] = pGrp;  in fuzzParseChangeset()
642         pParse->apGroup = apNew;  in fuzzParseChangeset()
643         pParse->nGroup++;  in fuzzParseChangeset()
645       rc = fuzzParseChanges(&p, pEnd, pParse);  in fuzzParseChangeset()
734 static void fuzzPrintGroup(FuzzChangeset *pParse, FuzzChangesetGroup *pGrp){  in fuzzPrintGroup()  argument
757     if( pParse->bPatchset==0 && eType==SQLITE_UPDATE ){  in fuzzPrintGroup()
760     fuzzPrintRecord(pGrp, &p, eType==SQLITE_DELETE && pParse->bPatchset);  in fuzzPrintGroup()
775 static int fuzzSelectChange(FuzzChangeset *pParse, FuzzChange *pChange){  in fuzzSelectChange()  argument
797   pChange->iGroup = fuzzRandomInt(pParse->nGroup);  in fuzzSelectChange()
798   pChange->iChange = fuzzRandomInt(pParse->nChange);  in fuzzSelectChange()
800     if( pParse->nUpdate==0 ) return -1;  in fuzzSelectChange()
801     pChange->iChange = fuzzRandomInt(pParse->nUpdate);  in fuzzSelectChange()
806     FuzzChangesetGroup *pGrp = pParse->apGroup[pChange->iGroup];  in fuzzSelectChange()
818     if( pParse->nGroup==1 ) return -1;  in fuzzSelectChange()
820       iGrp = fuzzRandomInt(pParse->nGroup);  in fuzzSelectChange()
822     pGrp = pParse->apGroup[pChange->iGroup];  in fuzzSelectChange()
823     pParse->apGroup[pChange->iGroup] = pParse->apGroup[iGrp];  in fuzzSelectChange()
824     pParse->apGroup[iGrp] = pGrp;  in fuzzSelectChange()
831     iSub = fuzzRandomInt(pParse->nVal);  in fuzzSelectChange()
832     pChange->pSub1 = pParse->apVal[iSub];  in fuzzSelectChange()
834       iSub = fuzzRandomInt(pParse->nVal);  in fuzzSelectChange()
835       pChange->pSub2 = pParse->apVal[iSub];  in fuzzSelectChange()
910   FuzzChangeset *pParse,  in fuzzCopyChange()  argument
915   int bPS = pParse->bPatchset;  in fuzzCopyChange()
916   FuzzChangesetGroup *pGrp = pParse->apGroup[iGrp];  in fuzzCopyChange()
992             pCopy = pParse->apVal[fuzzRandomInt(pParse->nVal)];  in fuzzCopyChange()
1011           pCopy = pParse->apVal[fuzzRandomInt(pParse->nVal)];  in fuzzCopyChange()
1043             pNew = pParse->apVal[fuzzRandomInt(pParse->nVal)];  in fuzzCopyChange()
1104   FuzzChangeset *pParse           /* Parse of input changeset */  in fuzzDoOneFuzz()  argument
1112     rc = fuzzSelectChange(pParse, &change);  in fuzzDoOneFuzz()
1113     for(iGrp=0; rc==SQLITE_OK && iGrp<pParse->nGroup; iGrp++){  in fuzzDoOneFuzz()
1114       FuzzChangesetGroup *pGrp = pParse->apGroup[iGrp];  in fuzzDoOneFuzz()
1127           if( pParse->nGroup==1 ) rc = -1;  in fuzzDoOneFuzz()
1153         pOut++[0] = pParse->bPatchset ? 'P' : 'T';  in fuzzDoOneFuzz()
1180           rc = fuzzCopyChange(pParse, iGrp, &change, &p, &pOut);  in fuzzDoOneFuzz()