diff options
| author | Kostya Serebryany <kcc@google.com> | 2018-07-19 01:23:32 +0000 |
|---|---|---|
| committer | Kostya Serebryany <kcc@google.com> | 2018-07-19 01:23:32 +0000 |
| commit | b245ab336ef0cef374b36d0fa4be432b3e6afcd2 (patch) | |
| tree | c20a0ef23c15af14c1c7be55749b4ed7b4dba6b2 /test | |
| parent | 385df7539a532c43119655dec04b7ac50111b2cb (diff) | |
[libFuzzer] first experimental attempt at DFT-based mutations (DFT=data-flow-trace)
git-svn-id: https://llvm.org/svn/llvm-project/compiler-rt/trunk@337434 91177308-0d34-0410-b5e6-96231b3b80d8
Diffstat (limited to 'test')
| -rw-r--r-- | test/fuzzer/only-some-bytes.test | 18 |
1 files changed, 12 insertions, 6 deletions
diff --git a/test/fuzzer/only-some-bytes.test b/test/fuzzer/only-some-bytes.test index 5301d2536..9d2791248 100644 --- a/test/fuzzer/only-some-bytes.test +++ b/test/fuzzer/only-some-bytes.test @@ -7,7 +7,7 @@ RUN: %no_fuzzer_cpp_compiler -fno-sanitize=all -fsanitize=dataflow -fsanitize RUN: %cpp_compiler %S/OnlySomeBytesTest.cpp -o %t-Fuzz # Prepare the inputs. -RUN: rm -rf %t/IN +RUN: rm -rf %t/* RUN: mkdir -p %t/IN RUN: echo -n 0123456789012345678901234567890123456789012345678901234567891234 > %t/IN/6 RUN: cat %t/IN/6 %t/IN/6 %t/IN/6 %t/IN/6 > %t/IN/8 @@ -22,10 +22,16 @@ RUN: (echo -n ABC; cat %t/IN/12) > %t/IN/ABC RUN: %t-Fuzz -focus_function=f0 -runs=0 %t/IN 2>&1 | FileCheck %s --check-prefix=ONE_FOCUSED_INPUT ONE_FOCUSED_INPUT: INFO: 1/3 inputs touch the focus function -RUN: rm -rf %t/DFT_DIR -RUN: %libfuzzer_src/scripts/collect_data_flow.py %t-DFT %t/IN %t/DFT_DIR +RUN: rm -rf %t/IN_DFT +RUN: %libfuzzer_src/scripts/collect_data_flow.py %t-DFT %t/IN %t/IN_DFT > /dev/null 2>&1 -# Repat twice to make sure that the inputs with DFT are not removed from the corpus. -RUN: %t-Fuzz -focus_function=f0 -data_flow_trace=%t/DFT_DIR -runs=100 %t/IN 2>&1 | FileCheck %s --check-prefix=HAVE_DFT -RUN: %t-Fuzz -focus_function=f0 -data_flow_trace=%t/DFT_DIR -runs=100 %t/IN 2>&1 | FileCheck %s --check-prefix=HAVE_DFT +# Repeat twice to make sure that the inputs with DFT are not removed from the corpus. +RUN: %t-Fuzz -focus_function=f0 -data_flow_trace=%t/IN_DFT -runs=100 %t/IN 2>&1 | FileCheck %s --check-prefix=HAVE_DFT +RUN: %t-Fuzz -focus_function=f0 -data_flow_trace=%t/IN_DFT -runs=100 %t/IN 2>&1 | FileCheck %s --check-prefix=HAVE_DFT HAVE_DFT: INFO: 1/{{.*}} inputs have the Data Flow Trace + +# Collect DFT, then use it. +RUN: rm -rf %t/C && mkdir %t/C && cp %t/IN/* %t/C +RUN: rm -rf %t/C_DFT && %libfuzzer_src/scripts/collect_data_flow.py %t-DFT %t/C %t/C_DFT > /dev/null 2>&1 +RUN: not %t-Fuzz -focus_function=f0 -data_flow_trace=%t/C_DFT -seed=1 -runs=1000000 -use_value_profile=3 %t/C 2> %t/log +RUN: grep BINGO %t/log |