syz-fuzzer: prefer to mutate instead of generate

Currently we generate 1 program per 9 mutations.
Do it per 99 mutations.
Benchmark shows both coverage increase and corpus reduction:

                    baseline     generate100            diff
coverage               65467           65569             102
corpus                 35423           35363             -60
exec total           5474879         5030990         -443889
This commit is contained in:
Dmitry Vyukov 2017-01-20 14:38:00 +01:00
parent c4901df5c3
commit 1451a9b65d

View File

@ -216,7 +216,7 @@ func main() {
}
corpusMu.RLock()
if len(corpus) == 0 || i%10 == 0 {
if len(corpus) == 0 || i%100 == 0 {
// Generate a new prog.
corpusMu.RUnlock()
p := prog.Generate(rnd, programLength, ct)