From c9899f967fe8e656dceb2a3670090c04bfdcfd26 Mon Sep 17 00:00:00 2001 From: Jack Lloyd Date: Fri, 29 Sep 2017 16:36:14 -0400 Subject: Doc updates --- doc/manual/fuzzing.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'doc/manual') diff --git a/doc/manual/fuzzing.rst b/doc/manual/fuzzing.rst index 43b125f6b..1f596f6da 100644 --- a/doc/manual/fuzzing.rst +++ b/doc/manual/fuzzing.rst @@ -18,11 +18,10 @@ need to compile libFuzzer:: Then build the fuzzers:: - $ ./configure.py --with-santitizers --build-fuzzer=libfuzzer --unsafe-fuzzer-mode + $ ./configure.py --cc=clang --build-fuzzer=libfuzzer --unsafe-fuzzer-mode \ + --cc-abi-flags='-fsanitize=address,undefined -fsanitize-coverage=edge,indirect-calls,8bit-counters -fno-sanitize-recover=undefined' $ make fuzzers -Using `--with-sanitizers` is optional but highly useful. - The fuzzer binaries will be in `build/fuzzer`. Simply pick one and run it, optionally also passing a directory containing corpus inputs. @@ -39,6 +38,8 @@ To fuzz with AFL (http://lcamtuf.coredump.cx/afl/):: $ ./configure.py --with-sanitizers --build-fuzzer=afl --unsafe-fuzzer-mode --cc-bin=afl-g++ $ make fuzzers +For AFL, `--with-sanitizers` is optional. + You can also use `afl-clang-fast++` or `afl-clang++`. The fuzzer binaries will be in `build/fuzzer`. To run them you need to -- cgit v1.2.3