]> Git Repo - qemu.git/commit
fuzz: add an instrumentation filter
authorAlexander Bulekov <[email protected]>
Tue, 13 Jul 2021 15:00:37 +0000 (11:00 -0400)
committerAlexander Bulekov <[email protected]>
Wed, 1 Sep 2021 11:33:13 +0000 (07:33 -0400)
commitdfc86c0f25126ce3242b317087234c7228418eb2
treead81753a114fd85bdb5434cac3c5ad9ffa8bb02a
parentf2e8b87a1afeec13157094909bf129c4b64192ba
fuzz: add an instrumentation filter

By default, -fsanitize=fuzzer instruments all code with coverage
information. However, this means that libfuzzer will track coverage over
hundreds of source files that are unrelated to virtual-devices. This
means that libfuzzer will optimize inputs for coverage observed in timer
code, memory APIs etc. This slows down the fuzzer and stores many inputs
that are not relevant to the actual virtual-devices.

With this change, clang versions that support the
"-fsanitize-coverage-allowlist" will only instrument a subset of the
compiled code, that is directly related to virtual-devices.

Signed-off-by: Alexander Bulekov <[email protected]>
Reviewed-by: Darren Kenny <[email protected]>
configure
scripts/oss-fuzz/instrumentation-filter-template [new file with mode: 0644]
This page took 0.026142 seconds and 4 git commands to generate.