aboutsummaryrefslogtreecommitdiffstats
path: root/docs/syscall_descriptions_syntax.md
diff options
context:
space:
mode:
authorVictor Chibotaru <tchibo@google.com>2017-08-24 17:52:57 +0200
committerDmitry Vyukov <dvyukov@google.com>2017-08-30 18:40:14 +0200
commit49c11eb5140bbe727be05015f78831043e2fe3a8 (patch)
tree0ab0e16b367215d0a8935d14f3a614182b2192b1 /docs/syscall_descriptions_syntax.md
parent07c84b670b4a25a7795e9fb8d47abe0922d2976b (diff)
ipc, prog, fuzzer, execprog: add hints generation code
A hint is basically a tuple consisting of a pointer to an argument in one of the syscalls of a program and a value, which should be assigned to that argument. A simplified version of hints workflow looks like this: 1. Fuzzer launches a program and collects all the comparisons' data for every syscall in the program. 2. Next it tries to match the obtained comparison operands' values vs. the input arguments' values. 3. For every such match the fuzzer mutates the program by replacing the pointed argument with the saved value. 4. If a valid program is obtained, then fuzzer launches it and checks if new coverage is obtained. This commit includes: 1. All the code related to hints generation, parsing and mutations. 2. Fuzzer functions to launch the process. 3. Some new stats gathered by fuzzer and manager, related to hints. 4. An updated version of execprog to test the hints process.
Diffstat (limited to 'docs/syscall_descriptions_syntax.md')
0 files changed, 0 insertions, 0 deletions