| OLD | NEW |
| 1 # Getting Started with libFuzzer in Chrome | 1 # Getting Started with libFuzzer in Chrome |
| 2 | 2 |
| 3 *** note | 3 *** note |
| 4 **Prerequisites:** libFuzzer in chrome is supported with GN on Linux only. | 4 **Prerequisites:** libFuzzer in Chrome is supported with GN on Linux only. |
| 5 *** | 5 *** |
| 6 | 6 |
| 7 This document will walk you through: | 7 This document will walk you through: |
| 8 | 8 |
| 9 * setting up your build enviroment. | 9 * setting up your build enviroment. |
| 10 * creating your first fuzzer. | 10 * creating your first fuzzer. |
| 11 * running the fuzzer and verifying its vitals. | 11 * running the fuzzer and verifying its vitals. |
| 12 | 12 |
| 13 ## Check Out ToT Clang | 13 ## Check Out ToT Clang |
| 14 | 14 |
| (...skipping 48 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 63 deps = [ ... ] | 63 deps = [ ... ] |
| 64 } | 64 } |
| 65 ``` | 65 ``` |
| 66 | 66 |
| 67 ## Build and Run Fuzzer Locally | 67 ## Build and Run Fuzzer Locally |
| 68 | 68 |
| 69 Build with ninja as usual and run: | 69 Build with ninja as usual and run: |
| 70 | 70 |
| 71 ```bash | 71 ```bash |
| 72 ninja -C out/libfuzzer url_parse_fuzzer | 72 ninja -C out/libfuzzer url_parse_fuzzer |
| 73 ./out/libfuzzer url_parse_fuzzer | 73 ./out/libfuzzer/url_parse_fuzzer |
| 74 ``` | 74 ``` |
| 75 | 75 |
| 76 Your fuzzer should produce output like this: | 76 Your fuzzer should produce output like this: |
| 77 | 77 |
| 78 ``` | 78 ``` |
| 79 INFO: Seed: 1787335005 | 79 INFO: Seed: 1787335005 |
| 80 INFO: -max_len is not provided, using 64 | 80 INFO: -max_len is not provided, using 64 |
| 81 INFO: PreferSmall: 1 | 81 INFO: PreferSmall: 1 |
| 82 #0 READ units: 1 exec/s: 0 | 82 #0 READ units: 1 exec/s: 0 |
| 83 #1 INITED cov: 2361 bits: 95 indir: 29 units: 1 exec/s: 0 | 83 #1 INITED cov: 2361 bits: 95 indir: 29 units: 1 exec/s: 0 |
| (...skipping 27 matching lines...) Expand all Loading... |
| 111 * Check the [Efficient Fuzzer Guide] to better understand your fuzzer | 111 * Check the [Efficient Fuzzer Guide] to better understand your fuzzer |
| 112 performance and for optimization hints. | 112 performance and for optimization hints. |
| 113 | 113 |
| 114 | 114 |
| 115 [Address Sanitizer]: http://clang.llvm.org/docs/AddressSanitizer.html | 115 [Address Sanitizer]: http://clang.llvm.org/docs/AddressSanitizer.html |
| 116 [Memory Sanitizer]: http://clang.llvm.org/docs/MemorySanitizer.html | 116 [Memory Sanitizer]: http://clang.llvm.org/docs/MemorySanitizer.html |
| 117 [url_parse_fuzzer.cc]: https://code.google.com/p/chromium/codesearch#chromium/sr
c/testing/libfuzzer/fuzzers/url_parse_fuzzer.cc | 117 [url_parse_fuzzer.cc]: https://code.google.com/p/chromium/codesearch#chromium/sr
c/testing/libfuzzer/fuzzers/url_parse_fuzzer.cc |
| 118 [ClusterFuzz status]: clusterfuzz.md#Status-Links | 118 [ClusterFuzz status]: clusterfuzz.md#Status-Links |
| 119 [Efficient Fuzzer Guide]: efficient_fuzzer.md | 119 [Efficient Fuzzer Guide]: efficient_fuzzer.md |
| 120 [crbug/598448]: https://bugs.chromium.org/p/chromium/issues/detail?id=598448 | 120 [crbug/598448]: https://bugs.chromium.org/p/chromium/issues/detail?id=598448 |
| OLD | NEW |