diff options
| author | Alexander Bulekov | 2020-07-06 21:55:32 +0200 |
|---|---|---|
| committer | Thomas Huth | 2020-07-21 07:27:28 +0200 |
| commit | ee16da12d7035bffb1c990c794de8fb1a96815d7 (patch) | |
| tree | a68c0aab2b0140285474c14d00658f5487cc49f9 /docs/devel | |
| parent | fuzz: build without AddressSanitizer, by default (diff) | |
| download | qemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.tar.gz qemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.tar.xz qemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.zip | |
docs/fuzz: describe building fuzzers with enable-sanitizers
Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Message-Id: <20200706195534.14962-3-alxndr@bu.edu>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Thomas Huth <thuth@redhat.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Diffstat (limited to 'docs/devel')
| -rw-r--r-- | docs/devel/fuzzing.txt | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt index db5641de74..12bf6aa0ca 100644 --- a/docs/devel/fuzzing.txt +++ b/docs/devel/fuzzing.txt @@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its detection. This results in a large page-map, and a much slower fork(). To build the fuzzers, install a recent version of clang: -Configure with (substitute the clang binaries with the version you installed): +Configure with (substitute the clang binaries with the version you installed). +Here, enable-sanitizers, is optional but it allows us to reliably detect bugs +such as out-of-bounds accesses, use-after-frees, double-frees etc. - CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing + CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \ + --enable-sanitizers Fuzz targets are built similarly to system/softmmu: |