diff options
| author | Kostya Serebryany <kcc@google.com> | 2016-05-05 18:07:09 +0000 |
|---|---|---|
| committer | Kostya Serebryany <kcc@google.com> | 2016-05-05 18:07:09 +0000 |
| commit | ec77af3a4b47f690c41bb6b9d92043933aaaa3bb (patch) | |
| tree | 2e1f3afd5dd5e5806457a5098669c392118bb591 /llvm/docs/LibFuzzer.rst | |
| parent | b438a327d70400ab0eca73c3c5505a2c3b05642a (diff) | |
| download | bcm5719-llvm-ec77af3a4b47f690c41bb6b9d92043933aaaa3bb.tar.gz bcm5719-llvm-ec77af3a4b47f690c41bb6b9d92043933aaaa3bb.zip | |
[libFuzzer] better docs for coverage
llvm-svn: 268656
Diffstat (limited to 'llvm/docs/LibFuzzer.rst')
| -rw-r--r-- | llvm/docs/LibFuzzer.rst | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/llvm/docs/LibFuzzer.rst b/llvm/docs/LibFuzzer.rst index 015b7ef87ae..529a99df87b 100644 --- a/llvm/docs/LibFuzzer.rst +++ b/llvm/docs/LibFuzzer.rst @@ -598,12 +598,15 @@ You can get the coverage for your corpus like this: .. code-block:: console - ASAN_OPTIONS=coverage=1 ./fuzzer CORPUS_DIR -runs=0 + ASAN_OPTIONS=coverage=1:html_cov_report=1 ./fuzzer CORPUS_DIR -runs=0 -This will run all the tests in the CORPUS_DIR but will not generate any new tests -and dump covered PCs to disk before exiting. -Then you can subtract the set of covered PCs from the set of all instrumented PCs in the binary, -see SanitizerCoverage_ for details. +This will run all tests in the CORPUS_DIR but will not perform any fuzzing. +At the end of the process it will dump a single html file with coverage information. +See SanitizerCoverage_ for details. + +You may also use other ways to visualize coverage, +e.g. `llvm-cov <http://llvm.org/docs/CommandGuide/llvm-cov.html>`_, but those will require +you to rebuild the code with different compiler flags. User-supplied mutators ---------------------- |
