[libFuzzer] add -trace_cmp=1 (guiding mutations based on the observed CMP instruction...
authorKostya Serebryany <kcc@google.com>
Fri, 14 Oct 2016 20:20:33 +0000 (20:20 +0000)
committerKostya Serebryany <kcc@google.com>
Fri, 14 Oct 2016 20:20:33 +0000 (20:20 +0000)
commita5f94fb6c9cb447ebf32bef848d81ac867fd1c63
tree7517f668bf9bcebd8fec1c80d44e3086426557e2
parent3ed0f643fc3267b7fbb319e4cb5610e5a7e1ba86
[libFuzzer] add -trace_cmp=1 (guiding mutations based on the observed CMP instructions). This is a reincarnation of the previously deleted -use_traces, but using a different approach for collecting traces. Still a toy, but at least it scales well. Also fix -merge in trace-pc-guard mode

llvm-svn: 284273
12 files changed:
llvm/lib/Fuzzer/FuzzerCorpus.h
llvm/lib/Fuzzer/FuzzerDefs.h
llvm/lib/Fuzzer/FuzzerDriver.cpp
llvm/lib/Fuzzer/FuzzerFlags.def
llvm/lib/Fuzzer/FuzzerLoop.cpp
llvm/lib/Fuzzer/FuzzerMutate.cpp
llvm/lib/Fuzzer/FuzzerMutate.h
llvm/lib/Fuzzer/FuzzerOptions.h
llvm/lib/Fuzzer/FuzzerTracePC.cpp
llvm/lib/Fuzzer/FuzzerTracePC.h
llvm/lib/Fuzzer/FuzzerTraceState.cpp
llvm/lib/Fuzzer/test/trace-malloc.test