Add llvm-dwarfdump-fuzzer that uses LibFuzzer to fuzz llvm-dwarfdump tool.

The fuzzer is very simple, but not quite useful at the moment: it's unable
to discover "interesting" examples, as LLVMObject library is terrible at
error recovery, calling "report_fatal_error()" far too often.

llvm-svn: 238451
This commit is contained in:
Alexey Samsonov 2015-05-28 18:35:18 +00:00
parent e507d8cb77
commit e17631f909
3 changed files with 52 additions and 0 deletions

View File

@ -7,3 +7,7 @@ set(LLVM_LINK_COMPONENTS
add_llvm_tool(llvm-dwarfdump
llvm-dwarfdump.cpp
)
if(LLVM_USE_SANITIZE_COVERAGE)
add_subdirectory(fuzzer)
endif()

View File

@ -0,0 +1,14 @@
set(LLVM_LINK_COMPONENTS
DebugInfoDWARF
Object
Support
)
add_llvm_executable(llvm-dwarfdump-fuzzer
EXCLUDE_FROM_ALL
llvm-dwarfdump-fuzzer.cpp
)
target_link_libraries(llvm-dwarfdump-fuzzer
LLVMFuzzer
)

View File

@ -0,0 +1,34 @@
//===-- llvm-dwarfdump-fuzzer.cpp - Fuzz the llvm-dwarfdump tool ----------===//
//
// The LLVM Compiler Infrastructure
//
// This file is distributed under the University of Illinois Open Source
// License. See LICENSE.TXT for details.
//
//===----------------------------------------------------------------------===//
///
/// \file
/// \brief This file implements a function that runs llvm-dwarfdump
/// on a single input. This function is then linked into the Fuzzer library.
///
//===----------------------------------------------------------------------===//
#include "llvm/DebugInfo/DIContext.h"
#include "llvm/DebugInfo/DWARF/DWARFContext.h"
#include "llvm/Object/ObjectFile.h"
#include "llvm/Support/MemoryBuffer.h"
using namespace llvm;
using namespace object;
extern "C" void LLVMFuzzerTestOneInput(uint8_t *data, size_t size) {
std::unique_ptr<MemoryBuffer> Buff = MemoryBuffer::getMemBuffer(
StringRef((const char *)data, size), "", false);
ErrorOr<std::unique_ptr<ObjectFile>> ObjOrErr =
ObjectFile::createObjectFile(Buff->getMemBufferRef());
if (!ObjOrErr)
return;
ObjectFile &Obj = *ObjOrErr.get();
std::unique_ptr<DIContext> DICtx(new DWARFContextInMemory(Obj));
DICtx->dump(nulls(), DIDT_All);
}