AFL++ cannot generate coverage reports using gcov in libfuzzer mode #2330
-
I am working a project, using afl-gcc-fast afl-g++-fast as compiler. In AFL++ with GCC, in normal mode(not libfuzzer mode), when using the following compile options: However, in AFL++'s libfuzzer mode, even when using the same compile options: -fsanitize=address -ftest-coverage -fprofile-arcs The same steps do not automatically generate .gcda files when CTRL + C is pressed to stop the fuzzer. I attempted to listen for the SIGSEGV & SIGINT event during initialization:
However, when the fuzzer running and CTRL + C is pressed to exit, So, I would like to know how to ensure that when CTRL + C is pressed to exit, .gcda files are generated and coverage reports can be obtained. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
that is not how you generate coverage, and combing gcov with fuzzing instrumentation just slows things horribly down. |
Beta Was this translation helpful? Give feedback.
that is not how you generate coverage, and combing gcov with fuzzing instrumentation just slows things horribly down.
if you try to make this work you are on your own :-)
Use https://github.com/vanhauser-thc/afl-cov instead.