864308a78d
Introduce CloseFile to be used instead of internal_close on non-POSIX
...
llvm-svn: 234481
2015-04-09 12:37:05 +00:00
1b2ff68408
Replace a hard-coded constant with a named one
...
llvm-svn: 234479
2015-04-09 12:20:02 +00:00
3745303c5b
Move some POSIX-specific functions from sanitizer_libc.h to a new sanitizer_posix.h
...
llvm-svn: 234418
2015-04-08 17:08:24 +00:00
daa9e2d4e8
[Sanitizers] Make OpenFile more portable
...
llvm-svn: 234410
2015-04-08 16:03:22 +00:00
e2a8241f84
[sancov] Shrink pc array on Android back to 2**24.
...
Address space is a lot more constrained on 32-bit Android compared to Linux.
llvm-svn: 234010
2015-04-03 12:59:39 +00:00
ad3ec82bb1
[ASan/Win] Minor improvements towards enabling coverage
...
llvm-svn: 233918
2015-04-02 14:48:08 +00:00
c4ed548b40
[Sanitizer] Be consistent about separating ==%PID== and logged data.
...
See https://code.google.com/p/address-sanitizer/issues/detail?id=385 .
llvm-svn: 233720
2015-03-31 18:16:42 +00:00
6c66ad0d75
[Sanitizer RT] Put the Symbolizer module name string ownership in order
...
Reviewed at http://reviews.llvm.org/D8666
llvm-svn: 233687
2015-03-31 12:50:05 +00:00
3e8d392e9a
[Sanitizers coverage] Minor cleanup: reduce scope and visibility of one method and one variable
...
llvm-svn: 233212
2015-03-25 20:19:51 +00:00
cd019f3655
[sanitizer] instead of comparing pointers to module_names while initializing coverage do a proper strcmp and strdup. NFC
...
llvm-svn: 233037
2015-03-23 23:19:13 +00:00
141e420a81
[ASan] Distinguish between read, write and read-write file access modes in OpenFile.
...
This is to fix mapping coverage files into memory on OSX.
llvm-svn: 232936
2015-03-23 10:10:46 +00:00
2d56abacd1
[sanitizer] change the sanitizer coverage format once again, this time adding a magic to the beginning of the file
...
llvm-svn: 232679
2015-03-18 22:03:39 +00:00
cba49d4b04
[sanitizer] add run-time a flag coverage_order_pcs. When true, the PCs are dumped in the order of their appearance
...
llvm-svn: 232573
2015-03-18 00:23:44 +00:00
9f1243ee49
[sanitizer] change the format of coverage dump: instead of always dumping 32-bit offsets dump 32-bit offsets on 32-bit arch and 64-bit offsets on 64-bit arch. Also add the 'bits' parameter to sancov.py. This is a user-visible interface change.
...
llvm-svn: 232555
2015-03-17 22:09:19 +00:00
27c50f4f02
asan: remove left-over code from submitted in rev r232501
...
__sanitizer_cov_hint is part of a different functionality
and was not intended to be submitted.
llvm-svn: 232506
2015-03-17 17:30:41 +00:00
6bd917a31f
asan: optimization experiments
...
The experiments can be used to evaluate potential optimizations that remove
instrumentation (assess false negatives). Instead of completely removing
some instrumentation, you set Exp to a non-zero value (mask of optimization
experiments that want to remove instrumentation of this instruction).
If Exp is non-zero, this pass will emit special calls into runtime
(e.g. __asan_report_exp_load1 instead of __asan_report_load1). These calls
make runtime terminate the program in a special way (with a different
exit status). Then you run the new compiler on a buggy corpus, collect
the special terminations (ideally, you don't see them at all -- no false
negatives) and make the decision on the optimization.
The exact reaction to experiments in runtime is not implemented in this patch.
It will be defined and implemented in a subsequent patch.
http://reviews.llvm.org/D8198
llvm-svn: 232501
2015-03-17 16:59:11 +00:00
48a4023f40
[sanitizer] fix instrumentation with -mllvm -sanitizer-coverage-block-threshold=0 to actually do something useful.
...
llvm-svn: 231736
2015-03-10 01:58:27 +00:00
769ddaa2d4
[sanitizer] Reconstruct the function that dumps block/edge coverage, hopefully making it more robust. Also increase the allowed coverage size on 32-bit.
...
llvm-svn: 231413
2015-03-05 22:19:25 +00:00
c1d6ab9a1e
[sanitizer] add a run-time flag to dump the coverage counter bitset
...
llvm-svn: 231343
2015-03-05 02:48:51 +00:00
07aee9c2c6
[sanitizer] when dumping coverage bitset, dump seperate file for every module, instead of dumping a single combined bitset
...
llvm-svn: 231319
2015-03-04 23:41:55 +00:00
be5e0ed919
[sanitizer/coverage] Add AFL-style coverage counters (search heuristic for fuzzing).
...
Introduce -mllvm -sanitizer-coverage-8bit-counters=1
which adds imprecise thread-unfriendly 8-bit coverage counters.
The run-time library maps these 8-bit counters to 8-bit bitsets in the same way
AFL (http://lcamtuf.coredump.cx/afl/technical_details.txt ) does:
counter values are divided into 8 ranges and based on the counter
value one of the bits in the bitset is set.
The AFL ranges are used here: 1, 2, 3, 4-7, 8-15, 16-31, 32-127, 128+.
These counters provide a search heuristic for single-threaded
coverage-guided fuzzers, we do not expect them to be useful for other purposes.
Depending on the value of -fsanitize-coverage=[123] flag,
these counters will be added to the function entry blocks (=1),
every basic block (=2), or every edge (=3).
Use these counters as an optional search heuristic in the Fuzzer library.
Add a test where this heuristic is critical.
llvm-svn: 231166
2015-03-03 23:27:02 +00:00
885994618c
[sanitizer] when dumping the basic block trace, also dump the module names. Patch by Laszlo Szekeres
...
llvm-svn: 229940
2015-02-20 00:30:44 +00:00
77cc729ad7
[sanitizer] add another workaround for PR 17409: when over a threshold emit coverage instrumentation as calls.
...
llvm-svn: 228102
2015-02-04 01:21:45 +00:00
7891c8c173
[Sanitizers] Re-apply the fix ordering initialization of coverage and guard arrays
...
Original commit: http://reviews.llvm.org/rL226440
Related review: http://reviews.llvm.org/D6892
llvm-svn: 227789
2015-02-02 09:38:10 +00:00
21a1a23790
[sanitizer] allow to reset the bb/edge coverage data inside the process while it is running (single-threaded). Also expose the current coverage set to the process.
...
llvm-svn: 227387
2015-01-28 22:39:44 +00:00
0bc26c0934
Revert r226440.
...
It was fixed the right way in r227195.
llvm-svn: 227196
2015-01-27 15:06:54 +00:00
abfacbdf3a
[Sanitizers] Order initialization of coverage and guard arrays
...
Differential Revision: http://reviews.llvm.org/D6892
llvm-svn: 226440
2015-01-19 09:41:52 +00:00
3f2e761826
[asan] Fix uninit in coverage.
...
pc_fd was not initialized to (-1) on some code paths, resulting in the program
erroneously closing stdin when reinitializing coverage.
llvm-svn: 225637
2015-01-12 17:13:20 +00:00
e02839b60f
[asan/tracing] write the trace using a sequence of internal_write calls instead of just one (otherwise files of > 2Gb are trunkated). Also a minor adjustment to the trace collection.
...
llvm-svn: 225230
2015-01-06 01:11:23 +00:00
0f53d9a2ee
[asan/tracing] extend the test a bit more, simplify the tracing code, add a guard page to trace array, fix the trace IDs before dumping
...
llvm-svn: 225108
2015-01-03 02:07:58 +00:00
d421db05bb
[asan] simplify the tracing code, make it use the same guard variables as coverage
...
llvm-svn: 225103
2015-01-03 00:54:43 +00:00
77c5c1a66d
[asan] fix coverage between fork() and exec(): reinitialize the guards after fork()
...
llvm-svn: 225016
2014-12-30 23:16:12 +00:00
a7ee2734cf
[asan] add flag coverage_pcs. When false, the coverage is not dumped as PCs. Useful e.g. if the user only needs coverage is bitset
...
llvm-svn: 225002
2014-12-30 19:55:04 +00:00
aa185bfc4b
[asan] change _sanitizer_cov_module_init to accept int* instead of int**
...
llvm-svn: 224999
2014-12-30 19:29:28 +00:00
103084691d
[asan] Bump coverage size limit on 32-bit platforms.
...
This increases the limit from 4M locations to 16M, reserving
64Mb virtual memory. Chrome has >5M unique coverage locations with coverage=3.
llvm-svn: 224855
2014-12-26 13:54:11 +00:00
05dc4be0dc
[asan] Allow enabling coverage at activation.
...
This is a re-commit of r224838 + r224839, previously reverted in r224850.
Test failures were likely (still can not reproduce) caused by two lit tests
using the same name for an intermediate build target.
llvm-svn: 224853
2014-12-26 12:32:32 +00:00
f8c7e25560
Revert r224838, r224839.
...
Flaky failures on the build bots.
llvm-svn: 224850
2014-12-26 10:19:56 +00:00
300d29a75d
[asan] Disable __sanitizer_cov_dump registration on Windows.
...
Looks like we can't use atexit() during ASan initialization on Windows.
llvm-svn: 224839
2014-12-25 15:11:00 +00:00
be9a53fec6
[asan] Allow enabling coverage at activation.
...
llvm-svn: 224838
2014-12-25 14:26:45 +00:00
ca9e045570
[sanitizer] Fix off-by-8x in direct coverage.
...
File mapping offset was calculated by offsetting (uptr *) instead of (char *).
llvm-svn: 224821
2014-12-24 13:57:11 +00:00
9fdeb37bd3
[asan] change the coverage collection scheme so that we can easily emit coverage for the entire process as a single bit set, and if coverage_bitset=1 actually emit that bitset
...
llvm-svn: 224789
2014-12-23 22:32:17 +00:00
baae9d2df1
[sanitizer] fix a performance regression in sanitizer coverage: move a small perf-critical function to a header. ALso set the coverage guard to 1 before the early return from CoverageData::Add
...
llvm-svn: 224660
2014-12-20 01:45:28 +00:00
656c29b08f
Replace InternalScopedBuffer<char> with InternalScopedString where applicable.
...
Summary: No functionality change.
Test Plan: make check-all
Reviewers: kcc
Reviewed By: kcc
Subscribers: llvm-commits
Differential Revision: http://reviews.llvm.org/D6472
llvm-svn: 223164
2014-12-02 22:20:11 +00:00
4cc76cb872
[Sanitizer] Bump kMaxPathLength to 4096 and use it more extensively instead of hardcoded constants
...
llvm-svn: 222803
2014-11-26 01:48:39 +00:00
4cadd4afa0
[asan/coverage] change the way asan coverage instrumentation is done: instead of setting the guard to 1 in the generated code, pass the pointer to guard to __sanitizer_cov and set it there. No user-visible functionality change expected
...
llvm-svn: 222675
2014-11-24 18:49:53 +00:00
c9d251e4d1
[asan] initial support for experimental basic-block tracing; also add tests for various levels of -fsanitize-coverage
...
llvm-svn: 222291
2014-11-19 00:24:11 +00:00
183cb6e35d
[asan] add interface function __sanitizer_get_total_unique_coverage; useful for coverage-guided in-process fuzzers
...
llvm-svn: 222060
2014-11-14 23:15:55 +00:00
4925fd4b05
Fix -Wcast-qual warnings in sanitizers
...
llvm-svn: 221936
2014-11-13 22:40:59 +00:00
26ca05ad96
[Sanitizer] Get rid of unnecessary allocations in StripModuleName. NFC.
...
llvm-svn: 221287
2014-11-04 19:34:29 +00:00
40aa4a26d1
[asan] increase the initial buffer size in caller-callee dumper
...
llvm-svn: 220991
2014-10-31 19:49:46 +00:00
Timur Iskhodzhanov