#
061b4af9 |
| 17-Jul-2018 |
Max Moroz <mmoroz@chromium.org> |
[libFuzzer] Mutation tracking and logging implemented.
Summary: Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are curre
[libFuzzer] Mutation tracking and logging implemented.
Summary: Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are currently being dumped to the command line.
Patch by Kodé Williams (@kodewilliams).
Reviewers: metzman, Dor1s, morehouse, kcc
Reviewed By: Dor1s, morehouse, kcc
Subscribers: delcypher, kubamracek, kcc, morehouse, llvm-commits, #sanitizers, mgorny
Differential Revision: https://reviews.llvm.org/D48054
llvm-svn: 337324
show more ...
|
#
43a22969 |
| 17-Jul-2018 |
Matt Morehouse <mascasa@google.com> |
libFuzzer: prevent irrelevant strings from leaking into auto-dictionary
This is a fix for bug 37047.
https://bugs.llvm.org/show_bug.cgi?id=37047
Implemented by basically reversing the logic. Previ
libFuzzer: prevent irrelevant strings from leaking into auto-dictionary
This is a fix for bug 37047.
https://bugs.llvm.org/show_bug.cgi?id=37047
Implemented by basically reversing the logic. Previously all strings were considered, with some operations excluded. Now strings are excluded by default, and only strings during the CB considered.
Patch By: pdknsk
Differential Revision: https://reviews.llvm.org/D48800
llvm-svn: 337296
show more ...
|
#
5697c59c |
| 16-Jul-2018 |
Max Moroz <mmoroz@chromium.org> |
Revert r337194 (https://reviews.llvm.org/D48891) due to compilation errors.
llvm-svn: 337206
|
#
8a5083df |
| 16-Jul-2018 |
Max Moroz <mmoroz@chromium.org> |
[libFuzzer] Mutation tracking and logging implemented.
Summary: Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are curre
[libFuzzer] Mutation tracking and logging implemented.
Summary: Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are currently being dumped to the command line.
Patch by Kodé Williams (@kodewilliams).
Reviewers: metzman, Dor1s, morehouse, kcc
Reviewed By: Dor1s, morehouse, kcc
Subscribers: delcypher, kubamracek, kcc, morehouse, llvm-commits, #sanitizers, mgorny
Differential Revision: https://reviews.llvm.org/D48054
llvm-svn: 337194
show more ...
|
#
a5bb6d53 |
| 09-Jul-2018 |
Matt Morehouse <mascasa@google.com> |
Revert "[libFuzzer] Mutation tracking and logging implemented"
This reverts r336597 due to bot breakage.
llvm-svn: 336616
|
#
d153d468 |
| 09-Jul-2018 |
Matt Morehouse <mascasa@google.com> |
[libFuzzer] Mutation tracking and logging implemented
Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are currently being
[libFuzzer] Mutation tracking and logging implemented
Code now exists to track number of mutations that are used in fuzzing in total and ones that produce new coverage. The stats are currently being dumped to the command line.
Patch By: Kode Williams
Differntial Revision: https://reviews.llvm.org/D48054
llvm-svn: 336597
show more ...
|
Revision tags: llvmorg-6.0.1, llvmorg-6.0.1-rc3, llvmorg-6.0.1-rc2 |
|
#
dfd5a90a |
| 24-Apr-2018 |
Dan Liew <dan@su-root.co.uk> |
[LibFuzzer] Tweak `MutationDispatcher::Mutate_CopyPart` mutation.
It doesn't make sense to non-deterministically choose between `CopyPart(..)` and `InsertPart(..)` when it is known that `InsertPart(
[LibFuzzer] Tweak `MutationDispatcher::Mutate_CopyPart` mutation.
It doesn't make sense to non-deterministically choose between `CopyPart(..)` and `InsertPart(..)` when it is known that `InsertPart(..)` will fail.
This upstream's a change from JFS solver's fork of LibFuzzer.
Differential Revision: https://reviews.llvm.org/D45693
llvm-svn: 330687
show more ...
|
Revision tags: llvmorg-6.0.1-rc1, llvmorg-5.0.2, llvmorg-5.0.2-rc2, llvmorg-5.0.2-rc1, llvmorg-6.0.0, llvmorg-6.0.0-rc3, llvmorg-6.0.0-rc2 |
|
#
1d8e5ea2 |
| 30-Jan-2018 |
Matt Morehouse <mascasa@google.com> |
[libFuzzer] Fix sizeof(ptr) bug.
sizeof(const char *) returns 4 or 8 when what we really want is the size of the array.
llvm-svn: 323802
|
Revision tags: llvmorg-6.0.0-rc1, llvmorg-5.0.1, llvmorg-5.0.1-rc3, llvmorg-5.0.1-rc2, llvmorg-5.0.1-rc1, llvmorg-5.0.0, llvmorg-5.0.0-rc5, llvmorg-5.0.0-rc4 |
|
#
bebcbfb4 |
| 27-Aug-2017 |
George Karpenkov <ekarpenkov@apple.com> |
[libFuzzer] Use custom allocators for STL containers in libFuzzer.
Avoids ODR violations causing spurious ASAN warnings.
Differential Revision: https://reviews.llvm.org/D37086
llvm-svn: 311866
|
#
24069a04 |
| 26-Aug-2017 |
George Karpenkov <ekarpenkov@apple.com> |
Revert "[libFuzzer] Use custom allocators for STL containers in libFuzzer"
This reverts commit 3539efc2f2218dba2bcbd645d0fe276f2b5cf588.
llvm-svn: 311831
|
#
d50410bf |
| 26-Aug-2017 |
George Karpenkov <ekarpenkov@apple.com> |
[libFuzzer] Use custom allocators for STL containers in libFuzzer
Avoids ODR violations causing spurious ASAN container overflow warnings.
Differential Revision: https://reviews.llvm.org/D37086
ll
[libFuzzer] Use custom allocators for STL containers in libFuzzer
Avoids ODR violations causing spurious ASAN container overflow warnings.
Differential Revision: https://reviews.llvm.org/D37086
llvm-svn: 311830
show more ...
|
Revision tags: llvmorg-5.0.0-rc3 |
|
#
10ab2ace |
| 21-Aug-2017 |
George Karpenkov <ekarpenkov@apple.com> |
Move libFuzzer to compiler_rt.
Resulting library binaries will be named libclang_rt.fuzzer*, and will be placed in Clang toolchain, allowing redistribution.
Differential Revision: https://reviews.l
Move libFuzzer to compiler_rt.
Resulting library binaries will be named libclang_rt.fuzzer*, and will be placed in Clang toolchain, allowing redistribution.
Differential Revision: https://reviews.llvm.org/D36908
llvm-svn: 311407
show more ...
|