3 ms·
some fuzzing tools (libFuzzer for example) leverage LLVM's intermediate representation to provide code-coverage metrics that they feed back into their fuzzing a
by greybox 2y ago
some fuzzing tools (libFuzzer for example) leverage LLVM's intermediate representation to provide code-coverage metrics that they feed back into their fuzzing algorithms, increasing test coverage
- michaelmure 2y agoGolang does that natively ;-)
- csb6 2y agoLibFuzzer is packaged with clang, so there is no additional installation [0]. You just have to provide an entry function and link it with a command-line flag. However, since C and C++ lack reflection you have to work with raw bytes as input. LibFuzzer has the option to provide callbacks that customize mutation, which can help with obtaining coverage. [0] https://llvm.org/docs/LibFuzzer.html https://llvm.org/docs/LibFuzzer.html