| Message ID | 20200706195534.14962-3-alxndr@bu.edu |
|---|---|
| State | New |
| Headers | show |
| Series | fuzz: misc patches | expand |
On 7/6/20 9:55 PM, Alexander Bulekov wrote: > Signed-off-by: Alexander Bulekov <alxndr@bu.edu> Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> > --- > docs/devel/fuzzing.txt | 7 +++++-- > 1 file changed, 5 insertions(+), 2 deletions(-) > > diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt > index 324d2cd92b..382ade974e 100644 > --- a/docs/devel/fuzzing.txt > +++ b/docs/devel/fuzzing.txt > @@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its detection. This results > in a large page-map, and a much slower fork(). > > To build the fuzzers, install a recent version of clang: > -Configure with (substitute the clang binaries with the version you installed): > +Configure with (substitute the clang binaries with the version you installed). > +Here, enable-sanitizers, is optional but it allows us to reliably detect bugs > +such as out-of-bounds accesses, use-after-frees, double-frees etc. > > - CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing > + CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \ > + --enable-sanitizers > > Fuzz targets are built similarly to system/softmmu: > >
On 06/07/2020 21.55, Alexander Bulekov wrote: > Signed-off-by: Alexander Bulekov <alxndr@bu.edu> > --- > docs/devel/fuzzing.txt | 7 +++++-- > 1 file changed, 5 insertions(+), 2 deletions(-) > > diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt > index 324d2cd92b..382ade974e 100644 > --- a/docs/devel/fuzzing.txt > +++ b/docs/devel/fuzzing.txt > @@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its detection. This results > in a large page-map, and a much slower fork(). > > To build the fuzzers, install a recent version of clang: > -Configure with (substitute the clang binaries with the version you installed): > +Configure with (substitute the clang binaries with the version you installed). > +Here, enable-sanitizers, is optional but it allows us to reliably detect bugs > +such as out-of-bounds accesses, use-after-frees, double-frees etc. > > - CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing > + CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \ > + --enable-sanitizers > > Fuzz targets are built similarly to system/softmmu: In the future, we should maybe use "CC=clang CXX=clang++" instead, since version numbers soon get old... Reviewed-by: Thomas Huth <thuth@redhat.com>
diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt index 324d2cd92b..382ade974e 100644 --- a/docs/devel/fuzzing.txt +++ b/docs/devel/fuzzing.txt @@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its detection. This results in a large page-map, and a much slower fork(). To build the fuzzers, install a recent version of clang: -Configure with (substitute the clang binaries with the version you installed): +Configure with (substitute the clang binaries with the version you installed). +Here, enable-sanitizers, is optional but it allows us to reliably detect bugs +such as out-of-bounds accesses, use-after-frees, double-frees etc. - CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing + CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \ + --enable-sanitizers Fuzz targets are built similarly to system/softmmu:
Signed-off-by: Alexander Bulekov <alxndr@bu.edu> --- docs/devel/fuzzing.txt | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)