syzkaller/executor
Dmitry Vyukov 8365c3838d all: implement edge coverage
Currently syzkaller uses per-call basic block (BB) coverage.
This change implements edge (not-per-call) coverage.
Edge coverage is more detailed than BB coverage as it captures
not-taken branches, looping, etc. So it provides better feedback signal.
This coverage is now called "signal" throughout the code.
BB code coverage is also collected as it is required for visualisation.
Not doing per-call coverage reduces corpus ~6-7x (from ~35K to ~5K),
this has profound effect on fuzzing efficiency.
2017-01-27 20:46:18 +01:00
..
common_kvm_amd64.h executor: protect against memory corruptions better 2017-01-25 11:01:30 +01:00
common_kvm_arm64.h sys, executor: more kvm improvements 2017-01-12 11:57:17 +01:00
common.h executor: protect against memory corruptions better 2017-01-25 11:01:30 +01:00
executor.cc all: implement edge coverage 2017-01-27 20:46:18 +01:00
kvm_gen.cc sys: extend kvm support 2017-01-09 20:28:10 +01:00
kvm.h sys: extend kvm support 2017-01-09 20:28:10 +01:00
kvm.S sys: extend kvm support 2017-01-09 20:28:10 +01:00
kvm.S.h sys: extend kvm support 2017-01-09 20:28:10 +01:00
test_kvm.cc executor: fix KVM test 2017-01-27 20:46:09 +01:00
test_test.go executor: fix copyin of values 2017-01-17 19:04:37 +01:00
test.go executor: fix copyin of values 2017-01-17 19:04:37 +01:00