diff options
| author | Kostya Serebryany <kcc@google.com> | 2015-05-11 20:51:19 +0000 |
|---|---|---|
| committer | Kostya Serebryany <kcc@google.com> | 2015-05-11 20:51:19 +0000 |
| commit | 5a99ecbbb3f629a99eee4b395fc8959cb711d66f (patch) | |
| tree | 0e05ba436d33c76d193bc13b748c1b3074de2749 /llvm/lib/Fuzzer/FuzzerFlags.def | |
| parent | ce6f907e2f585f724d3befe26f6542001144edb5 (diff) | |
| download | bcm5719-llvm-5a99ecbbb3f629a99eee4b395fc8959cb711d66f.tar.gz bcm5719-llvm-5a99ecbbb3f629a99eee4b395fc8959cb711d66f.zip | |
[lib/Fuzzer] add a trace-based mutatation logic. Same idea as with DFSan-based mutator, but instead of relying on taint tracking, try to find the data directly in the input. More (logic and comments) to go.
llvm-svn: 237043
Diffstat (limited to 'llvm/lib/Fuzzer/FuzzerFlags.def')
| -rw-r--r-- | llvm/lib/Fuzzer/FuzzerFlags.def | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/llvm/lib/Fuzzer/FuzzerFlags.def b/llvm/lib/Fuzzer/FuzzerFlags.def index 1222feb5937..ff74518245f 100644 --- a/llvm/lib/Fuzzer/FuzzerFlags.def +++ b/llvm/lib/Fuzzer/FuzzerFlags.def @@ -33,6 +33,7 @@ FUZZER_FLAG_INT( save_minimized_corpus, 0, "If 1, the minimized corpus is saved into the first input directory") FUZZER_FLAG_INT(use_counters, 0, "Use coverage counters") +FUZZER_FLAG_INT(use_traces, 0, "Experimental: use instruction traces") FUZZER_FLAG_INT(use_full_coverage_set, 0, "Experimental: Maximize the number of different full" " coverage sets as opposed to maximizing the total coverage." |
