2015-01-30 07:01:07 +08:00
|
|
|
# Build all these tests with -O0, otherwise optimizations may merge some
|
|
|
|
# basic blocks and we'll fail to discover the targets.
|
|
|
|
# Also enable the coverage instrumentation back (it is disabled
|
|
|
|
# for the Fuzzer lib)
|
2015-03-31 06:09:51 +08:00
|
|
|
set(CMAKE_CXX_FLAGS_RELEASE "${LIBFUZZER_FLAGS_BASE} -O0 -fsanitize-coverage=4")
|
2015-01-30 07:01:07 +08:00
|
|
|
|
2015-01-30 00:58:29 +08:00
|
|
|
set(Tests
|
[sanitizer/coverage] Add AFL-style coverage counters (search heuristic for fuzzing).
Introduce -mllvm -sanitizer-coverage-8bit-counters=1
which adds imprecise thread-unfriendly 8-bit coverage counters.
The run-time library maps these 8-bit counters to 8-bit bitsets in the same way
AFL (http://lcamtuf.coredump.cx/afl/technical_details.txt) does:
counter values are divided into 8 ranges and based on the counter
value one of the bits in the bitset is set.
The AFL ranges are used here: 1, 2, 3, 4-7, 8-15, 16-31, 32-127, 128+.
These counters provide a search heuristic for single-threaded
coverage-guided fuzzers, we do not expect them to be useful for other purposes.
Depending on the value of -fsanitize-coverage=[123] flag,
these counters will be added to the function entry blocks (=1),
every basic block (=2), or every edge (=3).
Use these counters as an optional search heuristic in the Fuzzer library.
Add a test where this heuristic is critical.
llvm-svn: 231166
2015-03-04 07:27:02 +08:00
|
|
|
CounterTest
|
2015-04-01 04:13:20 +08:00
|
|
|
CxxTokensTest
|
2015-02-20 11:02:37 +08:00
|
|
|
FourIndependentBranchesTest
|
2015-01-30 07:01:07 +08:00
|
|
|
FullCoverageSetTest
|
2015-01-30 00:58:29 +08:00
|
|
|
InfiniteTest
|
|
|
|
NullDerefTest
|
|
|
|
SimpleTest
|
|
|
|
TimeoutTest
|
|
|
|
)
|
|
|
|
|
2015-03-31 06:09:51 +08:00
|
|
|
set(DFSanTests
|
|
|
|
DFSanSimpleCmpTest
|
|
|
|
)
|
|
|
|
|
2015-01-30 00:58:29 +08:00
|
|
|
set(TestBinaries)
|
|
|
|
|
|
|
|
foreach(Test ${Tests})
|
|
|
|
add_executable(LLVMFuzzer-${Test}
|
|
|
|
${Test}.cpp
|
|
|
|
)
|
|
|
|
target_link_libraries(LLVMFuzzer-${Test}
|
|
|
|
LLVMFuzzer
|
|
|
|
)
|
|
|
|
set(TestBinaries ${TestBinaries} LLVMFuzzer-${Test})
|
|
|
|
endforeach()
|
|
|
|
|
2015-01-31 07:26:57 +08:00
|
|
|
configure_lit_site_cfg(
|
|
|
|
${CMAKE_CURRENT_SOURCE_DIR}/lit.site.cfg.in
|
|
|
|
${CMAKE_CURRENT_BINARY_DIR}/lit.site.cfg
|
|
|
|
)
|
|
|
|
|
|
|
|
configure_lit_site_cfg(
|
|
|
|
${CMAKE_CURRENT_SOURCE_DIR}/unit/lit.site.cfg.in
|
|
|
|
${CMAKE_CURRENT_BINARY_DIR}/unit/lit.site.cfg
|
|
|
|
)
|
|
|
|
|
|
|
|
include_directories(..)
|
|
|
|
include_directories(${LLVM_MAIN_SRC_DIR}/utils/unittest/googletest/include)
|
|
|
|
|
|
|
|
add_executable(LLVMFuzzer-Unittest
|
|
|
|
FuzzerUnittest.cpp
|
|
|
|
$<TARGET_OBJECTS:LLVMFuzzerNoMain>
|
|
|
|
)
|
|
|
|
|
|
|
|
target_link_libraries(LLVMFuzzer-Unittest
|
|
|
|
gtest
|
|
|
|
gtest_main
|
|
|
|
)
|
|
|
|
|
|
|
|
set(TestBinaries ${TestBinaries} LLVMFuzzer-Unittest)
|
|
|
|
|
2015-03-31 06:09:51 +08:00
|
|
|
add_subdirectory(dfsan)
|
|
|
|
|
|
|
|
foreach(Test ${DFSanTests})
|
|
|
|
set(TestBinaries ${TestBinaries} LLVMFuzzer-${Test})
|
|
|
|
endforeach()
|
|
|
|
|
|
|
|
|
2015-01-30 00:58:29 +08:00
|
|
|
set_target_properties(${TestBinaries}
|
|
|
|
PROPERTIES RUNTIME_OUTPUT_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
|
|
|
|
)
|
|
|
|
|
|
|
|
add_lit_testsuite(check-fuzzer "Running Fuzzer tests"
|
|
|
|
${CMAKE_CURRENT_BINARY_DIR}
|
2015-02-04 05:57:32 +08:00
|
|
|
DEPENDS ${TestBinaries} FileCheck not
|
2015-01-30 00:58:29 +08:00
|
|
|
)
|