1. 777702d [libFuzzer] Generalize the code for getting the previous offset for different architectures by George Karpenkov · 6 years ago
  2. 1fc397a [lib/fuzzer] Fix logging for Fuchsia by Petr Hosek · 6 years ago
  3. 31d6834 [fuzzer] Replace FuzzerExtFunctionsDlsymWin.cpp with FuzzerExtFunctionsWeakAlias.cpp by Jonathan Metzman · 6 years ago
  4. c229d27 [libFuzzer] Avoid fuzzer symbols being hidden. by Matt Morehouse · 6 years ago
  5. eb67e6b [libFuzzer] [Windows] Include windows.h and psapi.h with lowercase by Martin Storsjo · 6 years ago
  6. 6684fd6 [libFuzzer] Enable tests on Windows by Matt Morehouse · 6 years ago
  7. c0ab946 [libFuzzer] Port to Windows by Matt Morehouse · 6 years ago
  8. a9a2333 [libFuzzer] Remove mutation stats and weighted mutation selection. by Max Moroz · 6 years ago
  9. a4df143 Revert "[libFuzzer] Port to Windows" by Matt Morehouse · 6 years ago
  10. 159bb05 [libFuzzer] Port to Windows by Matt Morehouse · 6 years ago
  11. 1ecf64f Revert "[libFuzzer] Port to Windows" by Matt Morehouse · 6 years ago
  12. 2e0c8de [libFuzzer] Port to Windows by Matt Morehouse · 6 years ago
  13. b5bcd2b [sanitizer][fuzzer] Transition back to ZX_TIME_INFINITE by Petr Hosek · 6 years ago
  14. 1b4a701 Revert "[libFuzzer] Use std::discrete_distribution for input selection." by Matt Morehouse · 6 years ago
  15. dd6dde6 [libFuzzer] Use std::discrete_distribution for input selection. by Matt Morehouse · 6 years ago
  16. 4ba60e4 [libFuzzer] Optimize handle unstable checks by reducing iterations by Max Moroz · 6 years ago
  17. 5c31900 [libFuzzer] Add unstable function printing to print_unstable_stats flag by Max Moroz · 6 years ago
  18. c17e174 [libFuzzer] Initial implementation of weighted mutation leveraging during runtime. by Max Moroz · 6 years ago
  19. 1d4e630 [libFuzzer] use absolute distance in addition to the hamming distance in value profiling; our A/B testing have (somewhat weak) indication that this provides an additional signal for corpus expansion by Kostya Serebryany · 6 years ago
  20. 058bdcc [libFuzzer] Handle unstable edges by disregarding unstable edges by Max Moroz · 6 years ago
  21. d76e269 [sanitizer][fuzzer] Temporarily transition to ZX_TIME_INFINITE_OLD by Petr Hosek · 6 years ago
  22. 0463658 [libFuzzer] Handle unstable edges by using minimum hit counts by Max Moroz · 6 years ago
  23. 353e633 [libFuzzer] when -print_coverage=1 is given, print more stats (the number of seeds that hit every given function) by Kostya Serebryany · 6 years ago
  24. 35539d9 [libFuzzer] fix the bot (the no-assert build) by Kostya Serebryany · 6 years ago
  25. 6d2ecdf [libFuzzer] first experimental attempt at DFT-based mutations (DFT=data-flow-trace) by Kostya Serebryany · 6 years ago
  26. 0720d35 [Fuzzer] Improve crash unwinding on Fuchsia by Petr Hosek · 6 years ago
  27. 800b292 [libFuzzer] Create single template for visiting Inline8bitCounters by Max Moroz · 6 years ago
  28. 3d72d7c [libFuzzer] Mutation tracking and logging implemented. by Max Moroz · 6 years ago
  29. 3825919 libFuzzer: prevent irrelevant strings from leaking into auto-dictionary by Matt Morehouse · 6 years ago
  30. e608a42 Revert r337194 (https://reviews.llvm.org/D48891) due to compilation errors. by Max Moroz · 6 years ago
  31. 7bf4814 [libFuzzer] Mutation tracking and logging implemented. by Max Moroz · 6 years ago
  32. 3354646 [libFuzzer] Implement stat::stability_rate based on the percentage of unstable edges. by Max Moroz · 6 years ago
  33. 356c8e5 Revert r337175 (https://reviews.llvm.org/D49212) due to unintentional format changes. by Max Moroz · 6 years ago
  34. e336099 [libFuzzer] Implement stat::stability_rate based on the percentage of unstable edges. by Max Moroz · 6 years ago
  35. 111b680 Revert "[Fuzzer] Afl driver changing iterations handling" by Matt Morehouse · 6 years ago
  36. 13675a6 [libFuzzer] Make -fsanitize=memory,fuzzer work. by Matt Morehouse · 6 years ago
  37. 9aadf01 Revert "[libFuzzer] Mutation tracking and logging implemented" by Matt Morehouse · 6 years ago
  38. 31911a5 [libFuzzer] Mutation tracking and logging implemented by Matt Morehouse · 6 years ago
  39. adfcb66 libFuzzer: always print line-break for NEW_FUNC/PC output by Kostya Serebryany · 6 years ago
  40. 6684aa5 [libFuzzer] [NFC] Inline static variable to avoid the linker warning. by George Karpenkov · 6 years ago
  41. 8ec2133 [libFuzzer] add one more value profile metric, under a flag (experimental) by Kostya Serebryany · 6 years ago
  42. 75457e0 [libFuzzer] remove stale code, as suggested in https://reviews.llvm.org/D48800 by Kostya Serebryany · 6 years ago
  43. d814214 [libFuzzer] Use Vector rather than std::vector. by Matt Morehouse · 6 years ago
  44. ae171c9 Update copyright year to 2018. by Paul Robinson · 6 years ago
  45. 0289818 [fuzzer] Python 3 print fixes by Vitaly Buka · 6 years ago
  46. c1df470 [fuzzer] Fix collect_data_flow.py for python 3 by Vitaly Buka · 6 years ago
  47. 36a74d6 [Fuzzer] Afl driver changing iterations handling by David Carlier · 6 years ago
  48. 9fa6a4f [libFuzzer] When printing NEW_FUNC, use 1-base indexing. by Kostya Serebryany · 6 years ago
  49. 920ce9f [Fuzzer] Update the header path for fdio/spawn.h on Fuchsia by Petr Hosek · 6 years ago
  50. 4c9290b [libFuzzer] make the corpus elements aware of their data flow traces by Kostya Serebryany · 6 years ago
  51. 6bb2b04 [libFuzzer] remove an experimental flag -use_feature_frequency by Kostya Serebryany · 6 years ago
  52. b627db8 Fix compile error with libstdc++. by Ilya Biryukov · 6 years ago
  53. cb49669 [libFuzzer] initial implementation of -data_flow_trace. It parses the data flow trace and prints the summary, but doesn't use the information in any other way yet by Kostya Serebryany · 6 years ago
  54. 9e7462d [Fuzzer] Migrate Fuchsia port from launchpad to fdio_spawn by Petr Hosek · 6 years ago
  55. d350f10 [libFuzzer] add collect_data_flow.py that allows to run the data-flow tracer several times on subsets of inputs bytes, to overcome DFSan out-of-label failures by Kostya Serebryany · 6 years ago
  56. b8bfd8a [Fuzzer] Update _zx_port_wait function use in Fuchsia port by Petr Hosek · 6 years ago
  57. d4ef310 [libFuzzer] DataFlow tracer now tags a subset of the input. A separate script merges traces from the subsets by Kostya Serebryany · 6 years ago
  58. 4075960 [libFuzzer] fix two off-by-ones (!!) in the data flow tracer by Kostya Serebryany · 6 years ago
  59. bc92277 [libFuzzer] change the output format for the DataFlow tracer by Kostya Serebryany · 6 years ago
  60. ffef3b7 [libFuzzer] Don't complain about lack of interesting inputs when -runs=0. by Max Moroz · 6 years ago
  61. 0579c6c [libFuzzer] modify -print_corpus_stats to print whether the input reaches the focus function by Kostya Serebryany · 6 years ago
  62. cdc5010 [libFuzzer] reinstate -dump_coverage, which is still in use (reverts r332036) by Kostya Serebryany · 6 years ago
  63. 59587be [libFuzzer] add an experimental flag -focus_function: libFuzzer will try to focus on inputs that trigger that function by Kostya Serebryany · 6 years ago
  64. 970ba88 [libFuzzer] deprecate equivalence_server by Kostya Serebryany · 6 years ago
  65. 3c04abc [libFuzzer] refactor the implementation of -print_coverage by Kostya Serebryany · 6 years ago
  66. b01e5d5 [libFuzzer] remove the dump_coverage flag, it hasn't been working with the inline sanitizer coverage anyway by Kostya Serebryany · 6 years ago
  67. e01d11a [libFuzzer] remove the experimental support for clang coverage instrumentation. This mode has not been used and our experiments with https://github.com/google/fuzzer-test-suite show that this signal is weaker than the SanitizerCoverage by Kostya Serebryany · 6 years ago
  68. 01d47f0 [libFuzzer] Experimental data flow tracer for fuzz targets. by Kostya Serebryany · 6 years ago
  69. c56b603 wrong usages of sem_open in the libFuzzer by Kamil Rytarowski · 6 years ago
  70. 3711b10 [libFuzzer] Guard symbolization with try-lock. by Matt Morehouse · 6 years ago
  71. 6033af7 [libFuzzer] Don't short-circuit from CrashCallback. by Matt Morehouse · 6 years ago
  72. 53bf7e7 [libFuzzer] Report at most one crash per input. by Matt Morehouse · 6 years ago
  73. 96022c0 [LibFuzzer] Tweak `MutationDispatcher::Mutate_CopyPart` mutation. by Dan Liew · 6 years ago
  74. a1877f9 [libFuzzer] Add feature to not use AFL's deferred forkserver. by Matt Morehouse · 6 years ago
  75. 1df1ede [LibFuzzer] Report when custom counters are available. by Dan Liew · 6 years ago
  76. d38832f [LibFuzzer] Try to unbreak the `FuzzerMutate.ShuffleBytes1` unit test. by Dan Liew · 6 years ago
  77. c624fb9 [LibFuzzer] Unbreak the `trace-malloc-unbalanced.test` when using Python 3. by Dan Liew · 6 years ago
  78. c143d41 [Fuzzer] Add a missing header in Fuchsia implementation by Petr Hosek · 6 years ago
  79. 2a48b7f [Fuzzer] Make InterruptHandler non-blocking for Fuchsia by Petr Hosek · 6 years ago
  80. e6e1331 libFuzzer, OpenBSD support by Vitaly Buka · 6 years ago
  81. f16d0f1 [libFuzzer] Print a correct error message when a directory can't be opened. by Matt Morehouse · 6 years ago
  82. 8fb1aeb Revert "[compiler-rt] Change std::sort to llvm::sort in response to r327219" by Mandeep Singh Grang · 6 years ago
  83. 0ccd083 [compiler-rt] Change std::sort to llvm::sort in response to r327219 by Mandeep Singh Grang · 6 years ago
  84. 17a85f1 fix some user facing typos / in the comments by Sylvestre Ledru · 6 years ago
  85. 426cabb [libFuzzer] Include TEMP_MAX_LEN in Fuzzer::PrintStats. by Matt Morehouse · 6 years ago
  86. 422907c [libFuzzer] Set -experimental_len_control=1000 as default. by Matt Morehouse · 6 years ago
  87. 7922717 [Fuzzer] Use Zircon's public API on Fuchsia by Petr Hosek · 6 years ago
  88. b420736 [fuzzer] Update and enable libFuzzer on Fuchsia by Petr Hosek · 6 years ago
  89. 8b8c1c3 [libFuzzer] Fix sizeof(ptr) bug. by Matt Morehouse · 6 years ago
  90. 89c217f Reland "[libFuzzer] Support using libc++" by Petr Hosek · 6 years ago
  91. 6319925 Revert "[libFuzzer] Support using libc++" by Petr Hosek · 6 years ago
  92. f716733 [libFuzzer] Support using libc++ by Petr Hosek · 6 years ago
  93. 857df58 Switch from Bourne shell to simply base shell to build libfuzzer by Kamil Rytarowski · 6 years ago
  94. 5528696 lib Fuzzer FreeBSD support by Kamil Rytarowski · 6 years ago
  95. 096ea11 [libfuzzer] Fix UB when calculating Log(0) in StackDepthStepFunction(). by Max Moroz · 6 years ago
  96. 2198bc7 [libFuzzer] Add dummy call of LLVMFuzzerTestOneInput to afl_driver. by Matt Morehouse · 6 years ago
  97. cea27ca [libFuzzer] change the strategy for -experimental_len_control to grow max_len slower by Kostya Serebryany · 6 years ago
  98. 489f6e9 [libFuzzer] even less aggressive step function for stack depth. Also don't use asan in one test to speed it up by Kostya Serebryany · 6 years ago
  99. ca52ee1 [libFuzzer] make the stack depth signal less agressive, otherwise we are sometimes exploding the corpus size. This still needs more analysis and tuning by Kostya Serebryany · 6 years ago
  100. 4f95fd8 [libFuzzer] Add support for Fuchsia OS. by Matt Morehouse · 6 years ago