Kostya Serebryany
|
a5f94fb6c9
|
[libFuzzer] add -trace_cmp=1 (guiding mutations based on the observed CMP instructions). This is a reincarnation of the previously deleted -use_traces, but using a different approach for collecting traces. Still a toy, but at least it scales well. Also fix -merge in trace-pc-guard mode
llvm-svn: 284273
|
2016-10-14 20:20:33 +00:00 |
|
Kostya Serebryany
|
c5325ed29d
|
[libFuzzer] when shrinking the corpus, delete evicted files previously created by the current process
llvm-svn: 283682
|
2016-10-08 23:24:45 +00:00 |
|
Kostya Serebryany
|
cd04ec25dd
|
[libFuzzer] fix use-after-free in libFuzzer found by ... fuzzing.
llvm-svn: 283675
|
2016-10-08 21:57:48 +00:00 |
|
Kostya Serebryany
|
936b1e774f
|
[libFuzzer] be more careful with memory usage, print peak rss in status lines
llvm-svn: 283418
|
2016-10-06 05:14:00 +00:00 |
|
Kostya Serebryany
|
1c73f1bf27
|
[libFuzzer] refactoring to make -shrink=1 work for value profile, added a test.
llvm-svn: 283409
|
2016-10-05 22:56:21 +00:00 |
|
Kostya Serebryany
|
2455f0d013
|
[libFuzzer] clear the corpus elements if they are evicted (i.e. smaller elements with proper coverage are found). Make sure we never try to mutate empty element. Print the corpus size in bytes in the status lines
llvm-svn: 283279
|
2016-10-05 00:25:17 +00:00 |
|
Kostya Serebryany
|
5a52a11ce4
|
[libFuzzer] change the probabilities so that we choose only the inputs that are known to be minimal inputs for at least one coverage feature (works only with -shrink=1 for now)
llvm-svn: 283178
|
2016-10-04 01:51:44 +00:00 |
|
Kostya Serebryany
|
d216922a80
|
[libFuzzer] implement the -shrink=1 option that tires to make elements of the corpus smaller, off by default
llvm-svn: 282995
|
2016-10-01 01:04:29 +00:00 |
|
Kostya Serebryany
|
2c55613a08
|
[libFuzzer] more the feature set to InputCorpus; on feature update, change the feature counter of the old best input
llvm-svn: 282829
|
2016-09-30 01:19:56 +00:00 |
|
Kostya Serebryany
|
16a145fd0f
|
[libFuzzer] fix merging with trace-pc-guard
llvm-svn: 282224
|
2016-09-23 01:58:51 +00:00 |
|
Kostya Serebryany
|
624f59f4d8
|
[libFuzzer] add 'features' to the corpus elements, allow mutations with Size > MaxSize, fix sha1 in corpus stats; various refactorings
llvm-svn: 282129
|
2016-09-22 01:34:58 +00:00 |
|
Kostya Serebryany
|
29bb664075
|
[libFuzzer] add stats to the corpus; more refactoring
llvm-svn: 282121
|
2016-09-21 22:42:17 +00:00 |
|
Kostya Serebryany
|
20801e1b8a
|
[libFuzzer] more refactoring; don't compute sha1sum every time we mutate a unit from the corpus, use the stored one.
llvm-svn: 282115
|
2016-09-21 21:41:48 +00:00 |
|
Kostya Serebryany
|
6f5a804cdb
|
[libFuzzer] refactoring: split the large header into many; NFC
llvm-svn: 282044
|
2016-09-21 01:50:50 +00:00 |