From cdcc8b96dd9215a47ce5ce1074567a1be93eda5f Mon Sep 17 00:00:00 2001 From: Aleksandr Nogikh Date: Wed, 23 Mar 2022 13:50:36 +0000 Subject: all: collect raw coverage Raw coverage might be important when e.g. analysing the origins of out-of-place coverage in coverage reports or understanding why the fuzzer could not reach deeper code. If "raw_cover" is set to true, syzkaller will remember unsorted and unduplicated coverage (PCs) for each its corpus program. --- pkg/mgrconfig/config.go | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'pkg/mgrconfig') diff --git a/pkg/mgrconfig/config.go b/pkg/mgrconfig/config.go index 5d4a9f8f5..c13e6f452 100644 --- a/pkg/mgrconfig/config.go +++ b/pkg/mgrconfig/config.go @@ -132,6 +132,11 @@ type Config struct { // eg. "0xffffffff81000000:0x10\n" CovFilter covFilterCfg `json:"cover_filter,omitempty"` + // For each prog in the corpus, remember the raw array of PCs obtained from the kernel. + // It can be useful for debugging syzkaller descriptions and syzkaller itself. + // Disabled by default as it slows down fuzzing. + RawCover bool `json:"raw_cover"` + // Reproduce, localize and minimize crashers (default: true). Reproduce bool `json:"reproduce"` -- cgit mrf-deployment