diff options
| author | Kostya Serebryany <kcc@google.com> | 2019-01-31 01:47:29 +0000 |
|---|---|---|
| committer | Kostya Serebryany <kcc@google.com> | 2019-01-31 01:47:29 +0000 |
| commit | 025e03d62b24e580f1453c22acef41c218164a5b (patch) | |
| tree | c3ae92c70a76ecf91fe0a15c5fda1e2ba2a0304c /llvm/docs/LibFuzzer.rst | |
| parent | ca64c0936029defd3adc83d6225c7b21c7099c57 (diff) | |
| download | bcm5719-llvm-025e03d62b24e580f1453c22acef41c218164a5b.tar.gz bcm5719-llvm-025e03d62b24e580f1453c22acef41c218164a5b.zip | |
[libFuzzer] update docs
llvm-svn: 352715
Diffstat (limited to 'llvm/docs/LibFuzzer.rst')
| -rw-r--r-- | llvm/docs/LibFuzzer.rst | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/llvm/docs/LibFuzzer.rst b/llvm/docs/LibFuzzer.rst index 4852a47a6d1..b322726d8c9 100644 --- a/llvm/docs/LibFuzzer.rst +++ b/llvm/docs/LibFuzzer.rst @@ -414,8 +414,8 @@ A simple function that does something interesting if it receives the input return 0; } EOF - # Build test_fuzzer.cc with asan and link against libFuzzer.a - clang++ -fsanitize=address -fsanitize-coverage=trace-pc-guard test_fuzzer.cc libFuzzer.a + # Build test_fuzzer.cc with asan and link against libFuzzer. + clang++ -fsanitize=address,fuzzer test_fuzzer.cc # Run the fuzzer with no corpus. ./a.out @@ -483,7 +483,7 @@ the fuzzing but is very likely to improve the results. Value Profile ------------- -With ``-fsanitize-coverage=trace-cmp`` +With ``-fsanitize-coverage=trace-cmp`` (default with ``-fsanitize=fuzzer``) and extra run-time flag ``-use_value_profile=1`` the fuzzer will collect value profiles for the parameters of compare instructions and treat some new values as new coverage. @@ -562,8 +562,9 @@ to visualize and study your code coverage User-supplied mutators ---------------------- -LibFuzzer allows to use custom (user-supplied) mutators, -see FuzzerInterface.h_ +LibFuzzer allows to use custom (user-supplied) mutators, see +`Structure-Aware Fuzzing <https://github.com/google/fuzzer-test-suite/blob/master/tutorial/structure-aware-fuzzing.md>`_ +for more details. Startup initialization ---------------------- |
