126 typedef unsigned char u8;  typedef
308   u8 **apVal;                     /* Array of all values in changeset */
321   u8 *aPK;                        /* PK array for this table */
322   u8 *aChange;                    /* Buffer containing array of changes */
335   u8 *pSub1;                      /* Replace this value with pSub2 */
336   u8 *pSub2;                      /* And this one with pSub1 */
337   u8 aSub[128];                   /* Buffer for substitute value */
366 static int fuzzGetVarint(u8 *p, int *pnVal){  in fuzzGetVarint()
385 static int fuzzPutVarint(u8 *p, int nVal){  in fuzzPutVarint()
388     p[0] = (u8)nVal;  in fuzzPutVarint()
407 static i64 fuzzGetI64(u8 *aRec){  in fuzzGetI64()
423 static void fuzzPutU64(u8 *aRec, u64 iVal){  in fuzzPutU64()
441   u8 **ppHdr,                     /* IN/OUT: Iterator */  in fuzzParseHeader()
442   u8 *pEnd,                       /* 1 byte past EOF */  in fuzzParseHeader()
447   u8 cHdr = (pParse->bPatchset ? 'P' : 'T');  in fuzzParseHeader()
454     u8 *p = *ppHdr;  in fuzzParseHeader()
488 static int fuzzChangeSize(u8 *p, int *pSz){  in fuzzChangeSize()
489   u8 eType = p[0];  in fuzzChangeSize()
530   u8 **ppRec,                     /* IN/OUT: Iterator */  in fuzzParseRecord()
531   u8 *pEnd,                       /* One byte after end of input data */  in fuzzParseRecord()
538   u8 *p = *ppRec;  in fuzzParseRecord()
546         u8 **apNew = (u8**)sqlite3_realloc(pParse->apVal, nNew*sizeof(u8*));  in fuzzParseRecord()
572 static int fuzzParseChanges(u8 **ppData, u8 *pEnd, FuzzChangeset *pParse){  in fuzzParseChanges()
573   u8 cHdr = (pParse->bPatchset ? 'P' : 'T');  in fuzzParseChanges()
576   u8 *p = *ppData;  in fuzzParseChanges()
580     u8 eOp = p[0];  in fuzzParseChanges()
581     u8 bIndirect = p[1];  in fuzzParseChanges()
612   u8 *pChangeset,                 /* Buffer containing changeset */  in fuzzParseChangeset()
616   u8 *pEnd = &pChangeset[nChangeset];  in fuzzParseChangeset()
617   u8 *p = pChangeset;  in fuzzParseChangeset()
664 static int fuzzPrintRecord(FuzzChangesetGroup *pGrp, u8 **ppRec, int bPKOnly){  in fuzzPrintRecord()
666   u8 *p = *ppRec;  in fuzzPrintRecord()
672       u8 eType = p++[0];  in fuzzPrintRecord()
736   u8 *p;  in fuzzPrintGroup()
748     u8 eType = p[0];  in fuzzPrintGroup()
749     u8 bIndirect = p[1];  in fuzzPrintGroup()
841       pChange->aSub[0] = (u8)(fuzzRandomInt(5) + 1);  in fuzzSelectChange()
861           pChange->aSub[1] = (u8)nByte;  in fuzzSelectChange()
896         u8 mask = (1 << fuzzRandomInt(8 - (pChange->aSub[0]==0x03)));  in fuzzSelectChange()
913   u8 **pp, u8 **ppOut             /* IN/OUT: Input and output pointers */  in fuzzCopyChange()
917   u8 *p = *pp;  in fuzzCopyChange()
918   u8 *pOut = *ppOut;  in fuzzCopyChange()
919   u8 eType = p++[0];  in fuzzCopyChange()
925   u8 eNew = eType;  in fuzzCopyChange()
946     u8 *pCsr = p+1;  in fuzzCopyChange()
982       u8 *pCopy = p;  in fuzzCopyChange()
1006         pCopy = (u8*)"\0";  in fuzzCopyChange()
1040           u8 *pNew;  in fuzzCopyChange()
1065       u8 *pCsr = (*ppOut) + 2;  in fuzzCopyChange()
1068         u8 *pCopy = pCsr;  in fuzzCopyChange()
1069         if( pGrp->aPK[i] ) pCopy = (u8*)"\0";  in fuzzCopyChange()
1103   u8 *pBuf,                       /* Buffer to use for modified changeset */  in fuzzDoOneFuzz()
1111     u8 *pOut = pBuf;  in fuzzDoOneFuzz()
1137         u8 *pSaved;  in fuzzDoOneFuzz()
1138         u8 *p = pGrp->aChange;  in fuzzDoOneFuzz()
1158             u8 v = pGrp->aPK[i];  in fuzzDoOneFuzz()
1167             u8 max = 0;  in fuzzDoOneFuzz()
1202   u8 *pBuf = 0;  in main()
1216       pBuf = (u8*)fuzzMalloc((sqlite3_int64)nChangeset*2 + 1024);  in main()