mirror of
https://github.com/RPCS3/llvm-mirror.git
synced 2024-10-26 14:33:02 +02:00
285f1f0e41
Introduce -mllvm -sanitizer-coverage-8bit-counters=1 which adds imprecise thread-unfriendly 8-bit coverage counters. The run-time library maps these 8-bit counters to 8-bit bitsets in the same way AFL (http://lcamtuf.coredump.cx/afl/technical_details.txt) does: counter values are divided into 8 ranges and based on the counter value one of the bits in the bitset is set. The AFL ranges are used here: 1, 2, 3, 4-7, 8-15, 16-31, 32-127, 128+. These counters provide a search heuristic for single-threaded coverage-guided fuzzers, we do not expect them to be useful for other purposes. Depending on the value of -fsanitize-coverage=[123] flag, these counters will be added to the function entry blocks (=1), every basic block (=2), or every edge (=3). Use these counters as an optional search heuristic in the Fuzzer library. Add a test where this heuristic is critical. llvm-svn: 231166 |
||
|---|---|---|
| .. | ||
| AddressSanitizer.cpp | ||
| BoundsChecking.cpp | ||
| CMakeLists.txt | ||
| DataFlowSanitizer.cpp | ||
| GCOVProfiling.cpp | ||
| InstrProfiling.cpp | ||
| Instrumentation.cpp | ||
| LLVMBuild.txt | ||
| Makefile | ||
| MaximumSpanningTree.h | ||
| MemorySanitizer.cpp | ||
| SanitizerCoverage.cpp | ||
| ThreadSanitizer.cpp | ||