[PATCH] D49441: [libFuzzer] Update documentation regarding MSan.

Matt Morehouse via Phabricator via llvm-commits llvm-commits at lists.llvm.org
Thu Jul 19 09:57:54 PDT 2018


morehouse added a comment.

Benchmarks easy to discern the crash cause:

- boringssl - Finds same use-after-free as ASan.
- c-ares - Finds same crash as vanilla libFuzzer.
- freetype - Finds the target line.
- guetzli - False positive (fuzz target uses `std::map`).
- harfbuzz - Hits time limit without crashing.
- lcms - No crashes after several days.
- libjpeg-turbo - Finds the target line.
- openssl-1.0.1f - Finds Heartbleed.
- pcre2 - Finds same buffer overflow as ASan.

Benchmarks with new crash stack traces under MSan.  Would take more effort to determine cause:

- json
- libarchive
- libpng
- libssh
- libxml
- openssl-1.0.2d
- proj4
- re2
- woff2

I could investigate each of the new crashes, but that's more time than I'd like to spend on this.  Maybe I will just change the documentation to say that MSan support is experimental.


https://reviews.llvm.org/D49441





More information about the llvm-commits mailing list