| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | [libFuzzer] don't report memory leaks if we are dying due to a timeout (just ↵ | Kostya Serebryany | 2016-03-24 | 4 | -4/+24 |
| | | | | | | | use _Exit instead of exit in the timeout callback) llvm-svn: 264237 | ||||
| * | [libFuzzer] add a flag close_fd_mask so that we can silence spammy targets ↵ | Kostya Serebryany | 2016-03-18 | 3 | -0/+48 |
| | | | | | | | by closing stderr/stdout llvm-svn: 263831 | ||||
| * | [libFuzzer] read corpus dirs recursively | Kostya Serebryany | 2016-03-18 | 1 | -0/+9 |
| | | | | | llvm-svn: 263773 | ||||
| * | [libFuzzer] improve -merge functionality | Kostya Serebryany | 2016-03-18 | 2 | -15/+16 |
| | | | | | llvm-svn: 263769 | ||||
| * | [libFuzzer] deprecate several flags | Kostya Serebryany | 2016-03-17 | 2 | -2/+2 |
| | | | | | llvm-svn: 263739 | ||||
| * | [libfuzzer] adding std:string to allowed adaptable argument. | Mike Aizatsky | 2016-03-04 | 1 | -0/+9 |
| | | | | | llvm-svn: 262757 | ||||
| * | [libfuzzer] arbitrary function adapter. | Mike Aizatsky | 2016-03-03 | 4 | -0/+124 |
| | | | | | | | | | | The adapter automates converting sequence of bytes into arbitrary arguments. Differential Revision: http://reviews.llvm.org/D17829 llvm-svn: 262673 | ||||
| * | [libFuzzer] add generic signal handlers so that libFuzzer can report at ↵ | Kostya Serebryany | 2016-03-01 | 2 | -1/+5 |
| | | | | | | | least something if ASan is not handlig the signals for us. Remove abort_on_timeout flag. llvm-svn: 262415 | ||||
| * | [libFuzzer] fixing the bot | Kostya Serebryany | 2016-02-27 | 1 | -1/+1 |
| | | | | | llvm-svn: 262106 | ||||
| * | [libFuzzer] speedup path coverage handling | Kostya Serebryany | 2016-02-27 | 1 | -0/+1 |
| | | | | | llvm-svn: 262102 | ||||
| * | [libFuzzer] add -print_final_stats=1 flag | Kostya Serebryany | 2016-02-26 | 1 | -0/+8 |
| | | | | | llvm-svn: 262084 | ||||
| * | [libFuzzer] initial implementation of path coverage based on ↵ | Kostya Serebryany | 2016-02-26 | 3 | -0/+27 |
| | | | | | | | -fsanitize-coverage=trace-pc. This does not scale well yet, but already cracks FullCoverageSetTest in seconds llvm-svn: 262073 | ||||
| * | [libFuzzer] fix the libFuzzer bot | Kostya Serebryany | 2016-02-18 | 1 | -1/+1 |
| | | | | | llvm-svn: 261184 | ||||
| * | [libFuzzer] don't require seed in fuzzer::Mutate, instead use the global ↵ | Kostya Serebryany | 2016-02-13 | 1 | -4/+12 |
| | | | | | | | Fuzzer object for fuzzer::Mutate. This makes custom mutators fast llvm-svn: 260810 | ||||
| * | [libFuzzer] get rid of UserSuppliedFuzzer; NFC | Kostya Serebryany | 2016-02-13 | 3 | -3/+4 |
| | | | | | llvm-svn: 260798 | ||||
| * | [libFuzzer] simplify the code around Random. NFC | Kostya Serebryany | 2016-02-13 | 1 | -11/+11 |
| | | | | | llvm-svn: 260797 | ||||
| * | [libFuzzer] remove UserSuppliedFuzzer from the interface (it was a bad idea). | Kostya Serebryany | 2016-02-13 | 3 | -54/+0 |
| | | | | | llvm-svn: 260796 | ||||
| * | [libFuzzer] provide a plain C interface for custom mutators (experimental) | Kostya Serebryany | 2016-02-13 | 3 | -0/+32 |
| | | | | | llvm-svn: 260794 | ||||
| * | [libFuzzer] make -runs=N flag also affect the simple runner (will execute ↵ | Kostya Serebryany | 2016-02-12 | 3 | -1/+23 |
| | | | | | | | every input N times) llvm-svn: 260649 | ||||
| * | [libFuzzer] hot fix a test | Kostya Serebryany | 2016-02-04 | 1 | -1/+1 |
| | | | | | llvm-svn: 259732 | ||||
| * | [libFuzzer] don't write the test unit when a leak is detected (since we ↵ | Kostya Serebryany | 2016-02-04 | 3 | -0/+15 |
| | | | | | | | don't know which unit causes the leak) llvm-svn: 259731 | ||||
| * | [libFuzzer] allow passing 1 or more files as individual inputs | Kostya Serebryany | 2016-02-02 | 1 | -0/+12 |
| | | | | | llvm-svn: 259459 | ||||
| * | [libFuzzer] fail if the corpus dir does not exist | Kostya Serebryany | 2016-02-02 | 1 | -0/+3 |
| | | | | | llvm-svn: 259454 | ||||
| * | [libFuzzer] add -timeout_exitcode option | Kostya Serebryany | 2016-01-29 | 1 | -0/+1 |
| | | | | | llvm-svn: 259265 | ||||
| * | [libFuzzer] re-enable test for -abort_on_timeout=1, this time protecting ↵ | Kostya Serebryany | 2016-01-29 | 1 | -1/+1 |
| | | | | | | | from ASAN_OPTIONS set outside llvm-svn: 259263 | ||||
| * | Temporary disable broken fuzzer/timeout tests. | Ivan Krasin | 2016-01-25 | 1 | -1/+1 |
| | | | | | | | | | Reviewers: kcc Differential Revision: http://reviews.llvm.org/D16543 llvm-svn: 258702 | ||||
| * | [libFuzzer] add -abort_on_timeout option | Kostya Serebryany | 2016-01-23 | 1 | -0/+1 |
| | | | | | llvm-svn: 258631 | ||||
| * | Use std::piecewise_constant_distribution instead of ad-hoc binary search. | Ivan Krasin | 2016-01-22 | 1 | -1/+21 |
| | | | | | | | | | | | | | | | | Summary: Fix the issue with the most recently discovered unit receiving much less attention. Note: this is the second attempt (prev: r258473). Now, libc++ build is fixed. Reviewers: aizatsky, kcc Subscribers: llvm-commits Differential Revision: http://reviews.llvm.org/D16487 llvm-svn: 258571 | ||||
| * | Revert r258473 as it's breaking the build with libc++ | Ivan Krasin | 2016-01-22 | 1 | -21/+1 |
| | | | | | | | | | Reviewers: kcc Differential Revision: http://reviews.llvm.org/D16441 llvm-svn: 258479 | ||||
| * | Use std::piecewise_constant_distribution instead of ad-hoc binary search. | Ivan Krasin | 2016-01-22 | 1 | -1/+21 |
| | | | | | | | | | | | | | | | | | | | Summary: Fix the issue with the most recently discovered unit receiving much less attention. Note: I had to change the seed for one test to make it pass. Alternatively, the number of runs could be increased. I believe that the average time of 'foo' discovery is not increased, just seed=1 was particularly convenient for the previous PRNG scheme used. Reviewers: aizatsky, kcc Subscribers: llvm-commits, kcc Differential Revision: http://reviews.llvm.org/D16419 llvm-svn: 258473 | ||||
| * | [libFuzzer] use std::mt19937 for generating random numbers by default. Fix ↵ | Kostya Serebryany | 2016-01-19 | 1 | -0/+3 |
| | | | | | | | MyStoll to handle negative values. Use std::any_of instead of std::find_if llvm-svn: 258178 | ||||
| * | [libFuzzer] replace vector with a simpler data structure in the Dictionaries ↵ | Kostya Serebryany | 2016-01-16 | 1 | -6/+6 |
| | | | | | | | to avoid memory allocations on hot path llvm-svn: 257985 | ||||
| * | [libFuzzer] introduce LLVMFuzzerInitialize | Kostya Serebryany | 2016-01-16 | 3 | -0/+26 |
| | | | | | llvm-svn: 257980 | ||||
| * | [libFuzzer] do mutations based on memcmp/strcmp interceptors under a ↵ | Kostya Serebryany | 2016-01-15 | 1 | -7/+7 |
| | | | | | | | separate flag (-use_memcmp, default=1) llvm-svn: 257873 | ||||
| * | [libFuzzer] suggest a dictionary to the user of some of the trace-based ↵ | Kostya Serebryany | 2016-01-14 | 6 | -3/+30 |
| | | | | | | | dictionary entries were successful llvm-svn: 257736 | ||||
| * | [libFuzzer] make sure we find buffer overflow in the input buffer. ↵ | Kostya Serebryany | 2016-01-13 | 3 | -0/+24 |
| | | | | | | | Previously, re-using the same vector object was hiding buffer overflows (unless we used annotated vector) llvm-svn: 257701 | ||||
| * | [libFuzzer] change the way trace-based mutations are applied. Instead of a ↵ | Kostya Serebryany | 2016-01-09 | 1 | -3/+4 |
| | | | | | | | custom code just rely on the automatically created dictionary llvm-svn: 257248 | ||||
| * | [libFuzzer] don't limit memcmp tracing with 8 bytes | Kostya Serebryany | 2016-01-09 | 2 | -5/+14 |
| | | | | | llvm-svn: 257245 | ||||
| * | [libFuzzer] add a position hint to the dictionary-based mutator | Kostya Serebryany | 2016-01-07 | 3 | -8/+39 |
| | | | | | llvm-svn: 257013 | ||||
| * | [libfuzzer] print_new_cov_pcs experimental option. | Mike Aizatsky | 2016-01-06 | 1 | -0/+6 |
| | | | | | | | Differential Revision: http://reviews.llvm.org/D15901 llvm-svn: 256882 | ||||
| * | [libFuzzer] make trace-based fuzzing not crash in presence of threads | Kostya Serebryany | 2016-01-06 | 3 | -0/+31 |
| | | | | | llvm-svn: 256876 | ||||
| * | [libFuzzer] split the tests to run them in parallel, remove one redundant test | Kostya Serebryany | 2015-12-19 | 6 | -66/+41 |
| | | | | | llvm-svn: 256085 | ||||
| * | [libFuzzer] make CrossOver just one of the other mutations | Kostya Serebryany | 2015-12-19 | 2 | -7/+7 |
| | | | | | llvm-svn: 256081 | ||||
| * | [LibFuzzer] Introducing FUZZER_FLAG_UNSIGNED and using it for seeding. | Mike Aizatsky | 2015-12-10 | 1 | -2/+2 |
| | | | | | | | | | Differential Revision: http://reviews.llvm.org/D15339 done llvm-svn: 255296 | ||||
| * | [libFuzzer] compute base64 in-process instead of using an external lib. ↵ | Kostya Serebryany | 2015-12-04 | 1 | -0/+13 |
| | | | | | | | Since libFuzzer should not depend on anything, just re-implement base64 encoder. PR25746 llvm-svn: 254784 | ||||
| * | Libfuzzer: do not pass null into user function | Mike Aizatsky | 2015-12-02 | 1 | -0/+2 |
| | | | | | | | Differential Revision: http://reviews.llvm.org/D15098 llvm-svn: 254558 | ||||
| * | [libFuzzer] add a test that is built with -fsanitize-coverage=trace-bb | Kostya Serebryany | 2015-12-02 | 2 | -0/+22 |
| | | | | | llvm-svn: 254484 | ||||
| * | [libFuzzer] add a flag -exact_artifact_path | Kostya Serebryany | 2015-11-25 | 1 | -0/+2 |
| | | | | | llvm-svn: 254100 | ||||
| * | [libFuzzer] experimental flag -drill (another search heuristic; Mike ↵ | Kostya Serebryany | 2015-11-12 | 1 | -1/+5 |
| | | | | | | | Aizatsky's idea) llvm-svn: 252838 | ||||
| * | [libFuzzer] add UninstrumentedTest.cpp (missing from a previous commit) | Kostya Serebryany | 2015-11-10 | 1 | -0/+8 |
| | | | | | llvm-svn: 252658 | ||||

