GitHub - R9295/libfuzzer-coverage: Fuzzbench libfuzzer coverage runner (clang source-based coverage) but with the latest libfuzzer

R9295 / libfuzzer-coverage Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Fuzzbench libfuzzer coverage runner (clang source-based coverage) but with the latest libfuzzer

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
afl		afl
dataflow		dataflow
scripts		scripts
standalone		standalone
tests		tests
CMakeLists.txt		CMakeLists.txt
FuzzerBuiltins.h		FuzzerBuiltins.h
FuzzerBuiltinsMsvc.h		FuzzerBuiltinsMsvc.h
FuzzerCommand.h		FuzzerCommand.h
FuzzerCorpus.h		FuzzerCorpus.h
FuzzerCrossOver.cpp		FuzzerCrossOver.cpp
FuzzerDataFlowTrace.cpp		FuzzerDataFlowTrace.cpp
FuzzerDataFlowTrace.h		FuzzerDataFlowTrace.h
FuzzerDefs.h		FuzzerDefs.h
FuzzerDictionary.h		FuzzerDictionary.h
FuzzerDriver.cpp		FuzzerDriver.cpp
FuzzerExtFunctions.def		FuzzerExtFunctions.def
FuzzerExtFunctions.h		FuzzerExtFunctions.h
FuzzerExtFunctionsDlsym.cpp		FuzzerExtFunctionsDlsym.cpp
FuzzerExtFunctionsWeak.cpp		FuzzerExtFunctionsWeak.cpp
FuzzerExtFunctionsWindows.cpp		FuzzerExtFunctionsWindows.cpp
FuzzerExtraCounters.cpp		FuzzerExtraCounters.cpp
FuzzerExtraCountersDarwin.cpp		FuzzerExtraCountersDarwin.cpp
FuzzerExtraCountersWindows.cpp		FuzzerExtraCountersWindows.cpp
FuzzerFlags.def		FuzzerFlags.def
FuzzerFork.cpp		FuzzerFork.cpp
FuzzerFork.h		FuzzerFork.h
FuzzerIO.cpp		FuzzerIO.cpp
FuzzerIO.h		FuzzerIO.h
FuzzerIOPosix.cpp		FuzzerIOPosix.cpp
FuzzerIOWindows.cpp		FuzzerIOWindows.cpp
FuzzerInterceptors.cpp		FuzzerInterceptors.cpp
FuzzerInterface.h		FuzzerInterface.h
FuzzerInternal.h		FuzzerInternal.h
FuzzerLoop.cpp		FuzzerLoop.cpp
FuzzerMain.cpp		FuzzerMain.cpp
FuzzerMerge.cpp		FuzzerMerge.cpp
FuzzerMerge.h		FuzzerMerge.h
FuzzerMutate.cpp		FuzzerMutate.cpp
FuzzerMutate.h		FuzzerMutate.h
FuzzerOptions.h		FuzzerOptions.h
FuzzerPlatform.h		FuzzerPlatform.h
FuzzerRandom.h		FuzzerRandom.h
FuzzerSHA1.cpp		FuzzerSHA1.cpp
FuzzerSHA1.h		FuzzerSHA1.h
FuzzerTracePC.cpp		FuzzerTracePC.cpp
FuzzerTracePC.h		FuzzerTracePC.h
FuzzerUtil.cpp		FuzzerUtil.cpp
FuzzerUtil.h		FuzzerUtil.h
FuzzerUtilDarwin.cpp		FuzzerUtilDarwin.cpp
FuzzerUtilFuchsia.cpp		FuzzerUtilFuchsia.cpp
FuzzerUtilLinux.cpp		FuzzerUtilLinux.cpp
FuzzerUtilPosix.cpp		FuzzerUtilPosix.cpp
FuzzerUtilWindows.cpp		FuzzerUtilWindows.cpp
FuzzerValueBitMap.h		FuzzerValueBitMap.h
README.txt		README.txt
build.sh		build.sh

Repository files navigation

NOTE: compared to fuzzbench, use -print-coverage NOT -dump-coverage  
NOTE: it will still use clang source based coverage under the hood, so it must be compiled with -fprofile-instr-generate', '-fcoverage-mapping', '-gline-tables-only

./runner -print_coverage=1 -timeout=1 -fork=1 -ignore_timeouts=1 -ignore_crashes=1 -rss_limit_mb=2048 -runs=0 <my_corpus>
cat default.profraw