Google Git
Sign in
llvm / libfuzzer / c17e1742b64d818238e5b7b3bf8794c7f7d2cb84
commitc17e1742b64d818238e5b7b3bf8794c7f7d2cb84[log] [tgz]
authorMax Moroz <mmoroz@chromium.org>Thu Aug 02 22:30:03 2018 +0000
committerCopybara-Service <copybara-worker@google.com>Thu Mar 25 23:17:52 2021 -0700
treed1b1c9183c0d828e864ac666e4dc9398bf973be1
parent1d4e630ea7856a706d3c3389a43068912b67c6bf [diff]
[libFuzzer] Initial implementation of weighted mutation leveraging during runtime.

Summary:
Added functions that calculate stats while fuzz targets are running and give
mutations weight based on how much new coverage they provide, and choose better
performing mutations more often.

Patch by Kodé Williams (@kodewilliams).

Reviewers: Dor1s, metzman, morehouse

Reviewed By: Dor1s, morehouse

Subscribers: delcypher, kcc, llvm-commits, #sanitizers

Differential Revision: https://reviews.llvm.org/D49621

llvm-svn: 338776
GitOrigin-RevId: 5a9baa330caf473b9b1fd7c256258411932fba4c
6 files changed
tree: d1b1c9183c0d828e864ac666e4dc9398bf973be1
  1. afl/
  2. dataflow/
  3. scripts/
  4. standalone/
  5. tests/
  6. build.sh
  7. FuzzerCommand.h
  8. FuzzerCorpus.h
  9. FuzzerCrossOver.cpp
  10. FuzzerDataFlowTrace.cpp
  11. FuzzerDataFlowTrace.h
  12. FuzzerDefs.h
  13. FuzzerDictionary.h
  14. FuzzerDriver.cpp
  15. FuzzerExtFunctions.def
  16. FuzzerExtFunctions.h
  17. FuzzerExtFunctionsDlsym.cpp
  18. FuzzerExtFunctionsDlsymWin.cpp
  19. FuzzerExtFunctionsWeak.cpp
  20. FuzzerExtFunctionsWeakAlias.cpp
  21. FuzzerExtraCounters.cpp
  22. FuzzerFlags.def
  23. FuzzerInterface.h
  24. FuzzerInternal.h
  25. FuzzerIO.cpp
  26. FuzzerIO.h
  27. FuzzerIOPosix.cpp
  28. FuzzerIOWindows.cpp
  29. FuzzerLoop.cpp
  30. FuzzerMain.cpp
  31. FuzzerMerge.cpp
  32. FuzzerMerge.h
  33. FuzzerMutate.cpp
  34. FuzzerMutate.h
  35. FuzzerOptions.h
  36. FuzzerRandom.h
  37. FuzzerSHA1.cpp
  38. FuzzerSHA1.h
  39. FuzzerShmem.h
  40. FuzzerShmemFuchsia.cpp
  41. FuzzerShmemPosix.cpp
  42. FuzzerShmemWindows.cpp
  43. FuzzerTracePC.cpp
  44. FuzzerTracePC.h
  45. FuzzerUtil.cpp
  46. FuzzerUtil.h
  47. FuzzerUtilDarwin.cpp
  48. FuzzerUtilFuchsia.cpp
  49. FuzzerUtilLinux.cpp
  50. FuzzerUtilPosix.cpp
  51. FuzzerUtilWindows.cpp
  52. FuzzerValueBitMap.h
  53. LICENSE.TXT
  54. README.txt