tree e69e5216f4b63ea6e180e0e2a8d356e667dbfb27
parent 60dc31dcaa10a12b1318699ef8abb6f62828dbcc
author Dokyung Song <dokyungs@google.com> 1594236653 +0000
committer Copybara-Service <copybara-worker@google.com> 1616739691 -0700

[libFuzzer] Add a command-line option for tracing mutation of corpus inputs in the dot graph format.

This patch adds a new command-line option -mutation_graph_file=FILE for
debugging purposes, which traces how corpus inputs evolve during a fuzzing
run. For each new input that is added to the corpus, a new vertex corresponding
to the added input, as well as a new edge that connects its base input to itself
are written to the given file. Each vertex is labeled with the filename of the
input, and each edge is labeled with the mutation sequence that led to the input
w.r.t. its base input.

The format of the mutation graph file is the dot file format. Once prepended and
appended with "graph {" and "}", respectively, the graph becomes a valid dot
file and can be visualized.

Differential Revision: https://reviews.llvm.org/D86560

GitOrigin-RevId: 1bb1eac6b177739429e78703b265e7546792fd64