[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 2/4] docs/fuzz: describe building fuzzers with enable-sanitiz
|
From: |
Philippe Mathieu-Daudé |
|
Subject: |
Re: [PATCH 2/4] docs/fuzz: describe building fuzzers with enable-sanitizers |
|
Date: |
Tue, 7 Jul 2020 06:31:34 +0200 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0 |
On 7/6/20 9:55 PM, Alexander Bulekov wrote:
> Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
> ---
> docs/devel/fuzzing.txt | 7 +++++--
> 1 file changed, 5 insertions(+), 2 deletions(-)
>
> diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt
> index 324d2cd92b..382ade974e 100644
> --- a/docs/devel/fuzzing.txt
> +++ b/docs/devel/fuzzing.txt
> @@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its
> detection. This results
> in a large page-map, and a much slower fork().
>
> To build the fuzzers, install a recent version of clang:
> -Configure with (substitute the clang binaries with the version you
> installed):
> +Configure with (substitute the clang binaries with the version you
> installed).
> +Here, enable-sanitizers, is optional but it allows us to reliably detect bugs
> +such as out-of-bounds accesses, use-after-frees, double-frees etc.
>
> - CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing
> + CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \
> + --enable-sanitizers
>
> Fuzz targets are built similarly to system/softmmu:
>
>