1. 20bb5e7 [libFuzzer] make LLVMFuzzerTestOneInput (the fuzzer target function) return int instead of void. The actual return value is not *yet* used (and expected to be 0). This change is API breaking, so the fuzzers will need to be updated. by Kostya Serebryany · 10 years ago
  2. 65d0a14 [libFuzzer] remove experimental flag and functionality by Kostya Serebryany · 10 years ago
  3. b85db17 [libFuzzer] add a flag -max_total_time by Kostya Serebryany · 10 years ago
  4. dd02f1f [libFuzzer] perform fewer crossover operations compared to plain mutations by Kostya Serebryany · 10 years ago
  5. 468ed78 [libFuzzer] remove -iterations as redundant (there is also -num_runs) by Kostya Serebryany · 10 years ago
  6. 7d21166 [libFuzzer] actually make the dictionaries work (+docs) by Kostya Serebryany · 10 years ago
  7. a9346c2 [libFuzzer] honour -only_ascii=1 when reading the initial corpus. Also, remove ugly #ifdef by Kostya Serebryany · 10 years ago
  8. 12c7837 [libFuzzer] add two flags, -tbm_depth and -tbm_width to control how the trace-based-mutations are applied by Kostya Serebryany · 10 years ago
  9. 1688098 [libFuzzer] add colons to the stats output to avoid confusion by Kostya Serebryany · 10 years ago
  10. 69ab31a Fix unused variable 'X' in release builds. by Nick Lewycky · 10 years ago
  11. bc7c0ad [libFuzzer] add -only_ascii flag by Kostya Serebryany · 10 years ago
  12. 70926ae [libFuzzer] add option -report_slow_units=Nsec to control when slow units are printed by Kostya Serebryany · 10 years ago
  13. 1165efd [libFuzzer] limit the size of the inputs printed to stderr by Kostya Serebryany · 10 years ago
  14. 404c69f [libFuzzer] allow users to supply their own implementation of rand by Kostya Serebryany · 10 years ago
  15. 2b7d2e9 [libFuzzer] dump long running units to disk by Kostya Serebryany · 10 years ago
  16. 2ea204e [lib/Fuzzer] make assertions more informative and update comments for the user-supplied mutator by Kostya Serebryany · 10 years ago
  17. 316b571 [lib/Fuzzer] make the fuzzing timeout 1200 seconds by default (was: infinity) by Kostya Serebryany · 10 years ago
  18. c8228dd [lib/Fuzzer] fix build with assertions by Kostya Serebryany · 10 years ago
  19. 7c180ea [lib/Fuzzer] fully get rid of std::cerr in libFuzzer by Kostya Serebryany · 10 years ago
  20. f3c7cb4 [lib/Fuzzer] remove -use_coverage_pairs=1, an experimental feature that is unlikely to ever scale by Kostya Serebryany · 10 years ago
  21. f342459 [lib/Fuzzer] extend the fuzzer interface to allow user-supplied mutators by Kostya Serebryany · 10 years ago
  22. 490bbd6 [lib/Fuzzer] change the meaning of -timeout flag: now timeout is applied to every unit of work separately by Kostya Serebryany · 10 years ago
  23. cbb2334 [lib/Fuzzer] more efficient reload logic; also don't spam git too much by Kostya Serebryany · 10 years ago
  24. 2da7b84 [lib/Fuzzer] when -sync_command=<CMD> is given, periodically execute 'CMD CORPUS' to synchronize with other processes by Kostya Serebryany · 10 years ago
  25. a8f01bc Code cleanup: Reindent Fuzzer::MutateAndTestOne. by Logan Chien · 10 years ago
  26. 2252625 [lib/Fuzzer] rename FuzzerDFSan.cpp to FuzzerTraceState.cpp; update comments. NFC expected by Kostya Serebryany · 10 years ago
  27. 1ac8055 [lib/Fuzzer] use -fsanitize-coverage=trace-cmp when building LLVM with LLVM_USE_SANITIZE_COVERAGE; in lib/Fuzzer try to reload the corpus to pick up new units from other processes by Kostya Serebryany · 10 years ago
  28. beb24c3 [lib/Fuzzer] change the way we use taint information for fuzzing. Now, we run a single unit and collect suggested mutations based on tracing+taint data, then apply the suggested mutations one by one. The previous scheme was slower and more complex. by Kostya Serebryany · 10 years ago
  29. 7d470cf [lib/Fuzzer] minor refactoring/simplification, NFC by Kostya Serebryany · 10 years ago
  30. ca6a2a2 [lib/Fuzzer] on crash print the contents of the crashy input as base64 by Kostya Serebryany · 10 years ago
  31. 52a788e [fuzzer] Add support for token-based fuzzing (e.g. for C++). Allow string flags. by Kostya Serebryany · 11 years ago
  32. 16901a9 [fuzzer] when a single unit takes over 1 second to run and it is the slowest one so far, print it. by Kostya Serebryany · 11 years ago
  33. 03db8b9 [fuzzer] print various stats in a unified way by Kostya Serebryany · 11 years ago
  34. 16d03bd DFSan-based fuzzer (proof of concept). by Kostya Serebryany · 11 years ago
  35. be5e0ed [sanitizer/coverage] Add AFL-style coverage counters (search heuristic for fuzzing). by Kostya Serebryany · 11 years ago
  36. 2e3622b [fuzzer] one more experimental search mode: -use_coverage_pairs=1 by Kostya Serebryany · 11 years ago
  37. 016852c [fuzzer] split main() into FuzzerDriver() that takes a callback as a parameter and a tiny main() in a separate file by Kostya Serebryany · 11 years ago
  38. 92e0476 [fuzzer] add flag prefer_small_during_initial_shuffle, be a bit more verbose by Kostya Serebryany · 11 years ago
  39. 33f8669 [fuzzer] add -runs=N to limit the number of runs per session. Also, make sure we do some mutations w/o cross over. by Kostya Serebryany · 11 years ago
  40. 5b266a8 [fuzzer] make multi-process execution more verbose; fix mutation to actually respect mutation depth and to never produce empty units by Kostya Serebryany · 11 years ago
  41. fe43aa8 [fuzzer]: fix exit code, add more diagnostics by Kostya Serebryany · 11 years ago
  42. 4b96ce9 [fuzzer] update the include line to use the new header name by Kostya Serebryany · 11 years ago
  43. 2c1b33b [fuzzer] add -use_full_coverage_set=1 which solves FullCoverageSetTest. This does not scale very well yet, but might be a good start. by Kostya Serebryany · 11 years ago
  44. 6d768fc [fuzzer] minor cleanup based on reviews: remove redundant includes, fix a copy-pasto in tests by Kostya Serebryany · 11 years ago
  45. ef11698 Reverting r227452, which adds back the fuzzer library. Now excluding the fuzzer library based on LLVM_USE_SANITIZE_COVERAGE being set or unset. by Aaron Ballman · 11 years ago
  46. 7b54ed2 Temporarily reverting the fuzzer library as it causes too many build issues for MSVC users. This reverts: 227445, 227395, 227389, 227357, 227254, 227252 by Aaron Ballman · 11 years ago
  47. 265cf04 [fuzzer] add option -save_minimized_corpus by Kostya Serebryany · 11 years ago
  48. a8fbcf0 Add lit-style tests for the Fuzzer library by Kostya Serebryany · 11 years ago
  49. d53b43f Add a Fuzzer library by Kostya Serebryany · 11 years ago