Google Git
Sign in
llvm / libfuzzer / 01d47f04f351d3b253b9980b55bc11fe8450e3aa
commit01d47f04f351d3b253b9980b55bc11fe8450e3aa[log] [tgz]
authorKostya Serebryany <kcc@google.com>Thu May 10 19:59:01 2018 +0000
committerCopybara-Service <copybara-worker@google.com>Thu Mar 25 23:16:55 2021 -0700
tree4ad382e6881b360efb6542cc0522a6c71932a275
parentc56b6033bd62a9ebaf4c3a59e505d2e14465ff61 [diff]
[libFuzzer] Experimental data flow tracer for fuzz targets.

Summary:
Experimental data flow tracer for fuzz targets.
Allows to tell which bytes of the input affect which functions of the fuzz target.

We previously attempted to use DFSan directly in the libFuzzer process,
and that didn't work nicely.
Now we will try to collect the data flow information for the seed corpus
in a separate process (using this tracer), and then use it in the regular libFuzzer runs.

Reviewers: morehouse, pcc, Dor1s

Reviewed By: morehouse, Dor1s

Subscribers: delcypher, #sanitizers, llvm-commits

Differential Revision: https://reviews.llvm.org/D46666

llvm-svn: 332029
GitOrigin-RevId: f489e2bfef7fca1959ad7e5cb223edc13cc1bc18
1 file changed
tree: 4ad382e6881b360efb6542cc0522a6c71932a275
  1. afl/
  2. dataflow/
  3. scripts/
  4. standalone/
  5. tests/
  6. build.sh
  7. FuzzerClangCounters.cpp
  8. FuzzerCommand.h
  9. FuzzerCorpus.h
  10. FuzzerCrossOver.cpp
  11. FuzzerDefs.h
  12. FuzzerDictionary.h
  13. FuzzerDriver.cpp
  14. FuzzerExtFunctions.def
  15. FuzzerExtFunctions.h
  16. FuzzerExtFunctionsDlsym.cpp
  17. FuzzerExtFunctionsDlsymWin.cpp
  18. FuzzerExtFunctionsWeak.cpp
  19. FuzzerExtFunctionsWeakAlias.cpp
  20. FuzzerExtraCounters.cpp
  21. FuzzerFlags.def
  22. FuzzerInterface.h
  23. FuzzerInternal.h
  24. FuzzerIO.cpp
  25. FuzzerIO.h
  26. FuzzerIOPosix.cpp
  27. FuzzerIOWindows.cpp
  28. FuzzerLoop.cpp
  29. FuzzerMain.cpp
  30. FuzzerMerge.cpp
  31. FuzzerMerge.h
  32. FuzzerMutate.cpp
  33. FuzzerMutate.h
  34. FuzzerOptions.h
  35. FuzzerRandom.h
  36. FuzzerSHA1.cpp
  37. FuzzerSHA1.h
  38. FuzzerShmem.h
  39. FuzzerShmemFuchsia.cpp
  40. FuzzerShmemPosix.cpp
  41. FuzzerShmemWindows.cpp
  42. FuzzerTracePC.cpp
  43. FuzzerTracePC.h
  44. FuzzerUtil.cpp
  45. FuzzerUtil.h
  46. FuzzerUtilDarwin.cpp
  47. FuzzerUtilFuchsia.cpp
  48. FuzzerUtilLinux.cpp
  49. FuzzerUtilPosix.cpp
  50. FuzzerUtilWindows.cpp
  51. FuzzerValueBitMap.h
  52. LICENSE.TXT
  53. README.txt