2015-05-07 00:11:33 +00:00
|
|
|
CHECK: BINGO
|
|
|
|
|
|
|
|
|
|
RUN: ./LLVMFuzzer-SimpleTest 2>&1 | FileCheck %s
|
2015-01-29 16:58:29 +00:00
|
|
|
|
|
|
|
|
RUN: not ./LLVMFuzzer-InfiniteTest -timeout=2 2>&1 | FileCheck %s --check-prefix=InfiniteTest
|
|
|
|
|
InfiniteTest: ALARM: working on the last Unit for
|
|
|
|
|
InfiniteTest-NOT: CRASHED; file written to timeout
|
|
|
|
|
|
|
|
|
|
RUN: not ./LLVMFuzzer-TimeoutTest -timeout=5 2>&1 | FileCheck %s --check-prefix=TimeoutTest
|
|
|
|
|
TimeoutTest: ALARM: working on the last Unit for
|
|
|
|
|
TimeoutTest: CRASHED; file written to timeout
|
|
|
|
|
|
|
|
|
|
RUN: not ./LLVMFuzzer-NullDerefTest 2>&1 | FileCheck %s --check-prefix=NullDerefTest
|
|
|
|
|
NullDerefTest: CRASHED; file written to crash-
|
2015-01-29 23:01:07 +00:00
|
|
|
|
2015-05-07 00:11:33 +00:00
|
|
|
RUN: not ./LLVMFuzzer-FullCoverageSetTest -timeout=15 -seed=1 -mutate_depth=2 -use_full_coverage_set=1 2>&1 | FileCheck %s
|
|
|
|
|
|
|
|
|
|
RUN: not ./LLVMFuzzer-FourIndependentBranchesTest -timeout=15 -seed=1 -use_coverage_pairs=1 2>&1 | FileCheck %s
|
|
|
|
|
|
|
|
|
|
RUN: not ./LLVMFuzzer-CounterTest -use_counters=1 -max_len=6 -seed=1 -timeout=15 2>&1 | FileCheck %s
|
2015-02-20 03:02:37 +00:00
|
|
|
|
2015-05-08 21:45:19 +00:00
|
|
|
RUN: not ./LLVMFuzzer-DFSanSimpleCmpTest-DFSan -seed=1 -runs=1000000 -timeout=5 2>&1 | FileCheck %s
|
[sanitizer/coverage] Add AFL-style coverage counters (search heuristic for fuzzing).
Introduce -mllvm -sanitizer-coverage-8bit-counters=1
which adds imprecise thread-unfriendly 8-bit coverage counters.
The run-time library maps these 8-bit counters to 8-bit bitsets in the same way
AFL (http://lcamtuf.coredump.cx/afl/technical_details.txt) does:
counter values are divided into 8 ranges and based on the counter
value one of the bits in the bitset is set.
The AFL ranges are used here: 1, 2, 3, 4-7, 8-15, 16-31, 32-127, 128+.
These counters provide a search heuristic for single-threaded
coverage-guided fuzzers, we do not expect them to be useful for other purposes.
Depending on the value of -fsanitize-coverage=[123] flag,
these counters will be added to the function entry blocks (=1),
every basic block (=2), or every edge (=3).
Use these counters as an optional search heuristic in the Fuzzer library.
Add a test where this heuristic is critical.
git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@231166 91177308-0d34-0410-b5e6-96231b3b80d8
2015-03-03 23:27:02 +00:00
|
|
|
|
2015-05-08 21:45:19 +00:00
|
|
|
RUN: not ./LLVMFuzzer-DFSanMemcmpTest-DFSan -seed=1 -runs=100 -timeout=5 2>&1 | FileCheck %s
|
2015-03-30 22:09:51 +00:00
|
|
|
|
2015-05-07 00:11:33 +00:00
|
|
|
RUN: not ./LLVMFuzzer-CxxTokensTest -seed=1 -timeout=15 -tokens=%S/../cxx_fuzzer_tokens.txt 2>&1 | FileCheck %s
|
2015-03-31 20:13:20 +00:00
|
|
|
|
