Google Git
Sign in
chromium / chromium / src / testing / libfuzzer / f4303a451d86beec03807afc63aadbaf32cc53eb
commitf4303a451d86beec03807afc63aadbaf32cc53eb[log] [tgz]
authordominicc <dominicc@chromium.org>Tue Apr 18 15:00:57 2017
committerCommit bot <commit-bot@chromium.org>Tue Apr 18 15:00:57 2017
treeca76263e84e7801269f1c69be70fa8c9ca7ac3ab
parent04cb57821a269ce8568987485c2c3bbfd2941b55 [diff]
Only initialize ICU once in the template URL parser fuzzer.

BUG=712215

Review-Url: https://codereview.chromium.org/2820133004
Cr-Original-Commit-Position: refs/heads/master@{#465237}
Cr-Mirrored-From: https://chromium.googlesource.com/chromium/src
Cr-Mirrored-Commit: 719ee31460a7948576f62b3d404dc13cfa989f70
1 file changed
tree: ca76263e84e7801269f1c69be70fa8c9ca7ac3ab
  1. fuzzers/
  2. tests/
  3. archive_corpus.py
  4. BUILD.gn
  5. clusterfuzz.md
  6. dictionary_generator.py
  7. drfuzz_main.cc
  8. efficient_fuzzer.md
  9. fuzzer_test.gni
  10. gen_fuzzer_config.py
  11. getting_started.md
  12. OWNERS
  13. README.md
  14. reference.md
  15. reproducing.md
  16. unittest_main.cc
  17. zip_sources.py
README.md

libFuzzer in Chrome

go/libfuzzer-chrome

Getting Started | Buildbot | ClusterFuzz Status | Cover Bug

This directory contains integration between libFuzzer and Chrome. libFuzzer is an in-process coverage-driven evolutionary fuzzer. It helps engineers to uncover potential security & stability problems earlier.

Requirements: libFuzzer in Chrome is supported with GN on Linux only. Check Reference for experimental platform availability.

Integration Status

Fuzzer tests are well-integrated with Chrome build system & distributed ClusterFuzz fuzzing system. Cover bug: crbug.com/539572.

Documentation

  • Getting Started Guide walks you through all the steps necessary to create your fuzzer and submit it to ClusterFuzz.
  • Efficient Fuzzer Guide explains how to measure fuzzer effectiveness and ways to improve it.
  • ClusterFuzz Integration describes integration between ClusterFuzz and libFuzzer.
  • Reproducing contains information on how to reproduce bugs reported by ClusterFuzz.
  • Reference contains detailed references for different integration parts.

Trophies

  • ClusterFuzz Bugs - issues found and automatically filed by ClusterFuzz.
  • Manual Bugs - issues that were filed manually after running fuzzers.
  • Pdfium Bugs - bugs found in pdfium by manual fuzzing.
  • OSS Trophies - bugs found with libFuzzer in open-source projects.

Blog Posts

Project Links