5 Commits

Author SHA1 Message Date
bmc-msft
2b61256001
run until end of LLVMFuzzerTestOneInput for collecting coverage (#713) 2021-03-23 11:08:00 -04:00
jopletchMSFT
bb2b18a2b9
Fix MSVC Libfuzzer coverage reporting (#324)
This PR fixes two issues:
- First, in MSVC compiled binaries both the LLVM _and_ MSVC symbols are
present, but only the MSVC symbols have correct values. For example:

```
0:000> cdb: Reading initial command '.scriptload DumpCountersOld.js ; !dumpcounters "cov" ; q'
JavaScript script successfully loaded from 'DumpCountersOld.js'
[+] not disabling sympath
INFO: Seed: 58715679
INFO: Loaded 1 modules   (3968 inline 8-bit counters): 3968 [00007FF70DB4B000, 00007FF70DB4BF80), # XXX Note
xxx.exe: Running 1 inputs 1 time(s) each.
Running: inp
[+] processing xxx.exe
[+] using LLVM 10 symbols - 0x7ff70db72b00:0x7ff70db72b08 # XXX These are wrong
```

This means the order we search for the coverage symbols is important.

- Secondly, this enables support for MSVC 8bit counter coverage.

## Validation Steps Performed

Running any recent MSVC compiled libfuzzer target should fail to actually collect coverage, instead just returning the 8 null bytes described in the linked issue.
2020-11-19 02:47:33 +00:00
bmc-msft
36bae9e649
disable sympath unless it's set via target_env (#222) 2020-10-28 16:43:00 -04:00
bmc-msft
4d8151a1aa
Use second-chance break on av (#210) 2020-10-27 10:52:20 -04:00
Brian Caswell
d3a0b292e6 initial public release 2020-09-18 12:21:04 -04:00