From: Kostya Serebryany Date: Thu, 31 Jan 2019 01:47:29 +0000 (+0000) Subject: [libFuzzer] update docs X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=e424cc64f5afcbf14ccccb252729e752d4a5bfed;p=llvm [libFuzzer] update docs git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@352715 91177308-0d34-0410-b5e6-96231b3b80d8 --- diff --git a/docs/LibFuzzer.rst b/docs/LibFuzzer.rst index 4852a47a6d1..b322726d8c9 100644 --- a/docs/LibFuzzer.rst +++ b/docs/LibFuzzer.rst @@ -414,8 +414,8 @@ A simple function that does something interesting if it receives the input return 0; } EOF - # Build test_fuzzer.cc with asan and link against libFuzzer.a - clang++ -fsanitize=address -fsanitize-coverage=trace-pc-guard test_fuzzer.cc libFuzzer.a + # Build test_fuzzer.cc with asan and link against libFuzzer. + clang++ -fsanitize=address,fuzzer test_fuzzer.cc # Run the fuzzer with no corpus. ./a.out @@ -483,7 +483,7 @@ the fuzzing but is very likely to improve the results. Value Profile ------------- -With ``-fsanitize-coverage=trace-cmp`` +With ``-fsanitize-coverage=trace-cmp`` (default with ``-fsanitize=fuzzer``) and extra run-time flag ``-use_value_profile=1`` the fuzzer will collect value profiles for the parameters of compare instructions and treat some new values as new coverage. @@ -562,8 +562,9 @@ to visualize and study your code coverage User-supplied mutators ---------------------- -LibFuzzer allows to use custom (user-supplied) mutators, -see FuzzerInterface.h_ +LibFuzzer allows to use custom (user-supplied) mutators, see +`Structure-Aware Fuzzing `_ +for more details. Startup initialization ----------------------