Google Git
Sign in
llvm / libfuzzer / f7bd9700c034d80c43a040318c84d1d7682be5ac
commitf7bd9700c034d80c43a040318c84d1d7682be5ac[log] [tgz]
authorFabian Meumertzheim <meumertzheim@code-intelligence.com>Tue May 04 08:52:17 2021 -0700
committerCopybara-Service <copybara-worker@google.com>Sun May 09 19:11:04 2021 -0700
tree767fad657e620e4ac122c70c2678abf052442229
parentec3a006e2b10743694463cf97bd3b1f802f53122 [diff]
[libFuzzer] Preserve position hint in auto dictionary

Currently, the position hint of an entry in the persistent auto
dictionary is fixed to 1. As a consequence, with a 50% chance, the entry
is applied right after the first byte of the input. As the position 1
does not appear to have any particular significance, this is likely a
bug that may have been caused by confusing the constructor parameter
with a success count.

This commit resolves the issue by preserving any existing position hint
or disabling the hint if the original entry didn't have one.

Reviewed By: morehouse

Differential Revision: https://reviews.llvm.org/D101686

GitOrigin-RevId: b1048ff68298c1c4e303bbb77ca1832b2f873cd6
1 file changed
tree: 767fad657e620e4ac122c70c2678abf052442229
  1. afl/
  2. dataflow/
  3. scripts/
  4. standalone/
  5. tests/
  6. build.sh
  7. FuzzedDataProvider.h
  8. FuzzerBuiltins.h
  9. FuzzerBuiltinsMsvc.h
  10. FuzzerCommand.h
  11. FuzzerCorpus.h
  12. FuzzerCrossOver.cpp
  13. FuzzerDataFlowTrace.cpp
  14. FuzzerDataFlowTrace.h
  15. FuzzerDefs.h
  16. FuzzerDictionary.h
  17. FuzzerDriver.cpp
  18. FuzzerExtFunctions.def
  19. FuzzerExtFunctions.h
  20. FuzzerExtFunctionsDlsym.cpp
  21. FuzzerExtFunctionsWeak.cpp
  22. FuzzerExtFunctionsWindows.cpp
  23. FuzzerExtraCounters.cpp
  24. FuzzerFlags.def
  25. FuzzerFork.cpp
  26. FuzzerFork.h
  27. FuzzerInterceptors.cpp
  28. FuzzerInterface.h
  29. FuzzerInternal.h
  30. FuzzerIO.cpp
  31. FuzzerIO.h
  32. FuzzerIOPosix.cpp
  33. FuzzerIOWindows.cpp
  34. FuzzerLoop.cpp
  35. FuzzerMain.cpp
  36. FuzzerMerge.cpp
  37. FuzzerMerge.h
  38. FuzzerMutate.cpp
  39. FuzzerMutate.h
  40. FuzzerOptions.h
  41. FuzzerPlatform.h
  42. FuzzerRandom.h
  43. FuzzerSHA1.cpp
  44. FuzzerSHA1.h
  45. FuzzerTracePC.cpp
  46. FuzzerTracePC.h
  47. FuzzerUtil.cpp
  48. FuzzerUtil.h
  49. FuzzerUtilDarwin.cpp
  50. FuzzerUtilFuchsia.cpp
  51. FuzzerUtilLinux.cpp
  52. FuzzerUtilPosix.cpp
  53. FuzzerUtilWindows.cpp
  54. FuzzerValueBitMap.h
  55. LICENSE.TXT
  56. README.txt