root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity

Document the recommended parameters for fuzzing 

We use those parameters for calculating the coverage.

Reviewed-by: Rich Salz <rsalz@openssl.org>
GH: #2088
This commit is contained in:
Kurt Roeckx 2016-12-15 20:06:51 +01:00
parent 2fd54ebadf
commit e104d01deb
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
fuzz/README.md
View File

@ -40,7 +40,10 @@ Configure for fuzzing:
--with-fuzzer-lib=../../svn-work/Fuzzer/libFuzzer \ --with-fuzzer-lib=../../svn-work/Fuzzer/libFuzzer \
-DPEDANTIC enable-asan enable-ubsan no-shared \ -DPEDANTIC enable-asan enable-ubsan no-shared \
-DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION \ -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION \
-fsanitize-coverage=edge,indirect-calls,8bit-counters -fsanitize-coverage=edge,indirect-calls,8bit-counters \
enable-ec_nistp_64_gcc_128 -fno-sanitize=alignment enable-tls1_3 \
enable-weak-ssl-ciphers enable-rc5 enable-md2 \
enable-ssl3 enable-ssl3-method enable-nextprotoneg
$ sudo apt-get install make $ sudo apt-get install make
$ LDCMD=clang++ make -j $ LDCMD=clang++ make -j
$ fuzz/helper.py $FUZZER $ fuzz/helper.py $FUZZER
@ -58,9 +61,14 @@ AFL
Configure for fuzzing: Configure for fuzzing:
$ sudo apt-get install afl-clang $ sudo apt-get install afl-clang
$ CC=afl-clang-fast ./config enable-fuzz-afl no-shared $ CC=afl-clang-fast ./config enable-fuzz-afl no-shared -DPEDANTIC \
enable-tls1_3 enable-weak-ssl-ciphers enable-rc5 enable-md2 \
enable-ssl3 enable-ssl3-method enable-nextprotoneg \
enable-ec_nistp_64_gcc_128
$ make $ make
The following options can also be enabled: enable-asan, enable-ubsan, enable-msan
Run one of the fuzzers: Run one of the fuzzers:
$ afl-fuzz -i fuzz/corpora/$FUZZER -o fuzz/corpora/$FUZZER/out fuzz/$FUZZER $ afl-fuzz -i fuzz/corpora/$FUZZER -o fuzz/corpora/$FUZZER/out fuzz/$FUZZER