Google Git
Sign in
chromium / chromium / llvm-project / compiler-rt / lib / fuzzer / 7bf5d188f40c1edcfbb5eb6860fad3731d8713d7
commit7bf5d188f40c1edcfbb5eb6860fad3731d8713d7[log] [tgz]
authordor1s <dor1s>Thu Apr 11 16:24:53 2019
committerdor1s <dor1s>Thu Apr 11 16:24:53 2019
tree66a55ed7849b3710e2d6c917585aabe3c05f1d60
parent07f76068a75eae65084daaa29862b4f86a2e7d72 [diff]
[libFuzzer] Fallback to default Mutate when MutateWithMask fails.

Summary:
In case the current corpus input doesn't have bytes going into the
focus function, MutateWithMask is useless and may fail gently, allowing the
default mutation routine happen, rather than crashing on an assertion.

For more context and the initial fix suggestion, see:
https://github.com/google/oss-fuzz/issues/1632#issuecomment-481862879

Reviewers: kcc, morehouse

Reviewed By: kcc

Subscribers: delcypher, #sanitizers, llvm-commits

Tags: #llvm, #sanitizers

Differential Revision: https://reviews.llvm.org/D60567

git-svn-id: https://llvm.org/svn/llvm-project/compiler-rt/trunk/lib/fuzzer@358190 91177308-0d34-0410-b5e6-96231b3b80d8
2 files changed
tree: 66a55ed7849b3710e2d6c917585aabe3c05f1d60
  1. afl/
  2. dataflow/
  3. scripts/
  4. standalone/
  5. tests/
  6. build.sh
  7. CMakeLists.txt
  8. FuzzerBuiltins.h
  9. FuzzerBuiltinsMsvc.h
  10. FuzzerCommand.h
  11. FuzzerCorpus.h
  12. FuzzerCrossOver.cpp
  13. FuzzerDataFlowTrace.cpp
  14. FuzzerDataFlowTrace.h
  15. FuzzerDefs.h
  16. FuzzerDictionary.h
  17. FuzzerDriver.cpp
  18. FuzzerExtFunctions.def
  19. FuzzerExtFunctions.h
  20. FuzzerExtFunctionsDlsym.cpp
  21. FuzzerExtFunctionsWeak.cpp
  22. FuzzerExtFunctionsWindows.cpp
  23. FuzzerExtraCounters.cpp
  24. FuzzerFlags.def
  25. FuzzerFork.cpp
  26. FuzzerFork.h
  27. FuzzerInterface.h
  28. FuzzerInternal.h
  29. FuzzerIO.cpp
  30. FuzzerIO.h
  31. FuzzerIOPosix.cpp
  32. FuzzerIOWindows.cpp
  33. FuzzerLoop.cpp
  34. FuzzerMain.cpp
  35. FuzzerMerge.cpp
  36. FuzzerMerge.h
  37. FuzzerMutate.cpp
  38. FuzzerMutate.h
  39. FuzzerOptions.h
  40. FuzzerRandom.h
  41. FuzzerSHA1.cpp
  42. FuzzerSHA1.h
  43. FuzzerTracePC.cpp
  44. FuzzerTracePC.h
  45. FuzzerUtil.cpp
  46. FuzzerUtil.h
  47. FuzzerUtilDarwin.cpp
  48. FuzzerUtilFuchsia.cpp
  49. FuzzerUtilLinux.cpp
  50. FuzzerUtilPosix.cpp
  51. FuzzerUtilWindows.cpp
  52. FuzzerValueBitMap.h
  53. README.txt