[llvm-dev] Basic Coverage

[Muhui Jiang via llvm-dev]

Hi Peter

I think you may misunderstand my question. I mean I have a binary and one
input. I run the binary with this input. Can I know what IR basic blocks
are covered. What I want to know is not only the number but also the BBs’
labels/IDs. Many thanks

Regards
Muhui

Peter Teoh <htmldeveloper at gmail.com>于2018年9月3日 周一下午6:06写道：

> this is a classic problem:   how to derive a complete coverage of all
> potential paths of execution.   and the path covered is not only dependent
> on the input, it may depend on many other external factors like OS
> environment, external resource like network, storage, and memories etc.
>  normally a complete coverage is computationally infeasible, but if you let
> a fuzzer lib libFuzzer do the work of finding random inputs + environments,
> then a "most probabilistically likely coverage" may be constructed.
>
> On Mon, Sep 3, 2018 at 1:17 PM Muhui Jiang via llvm-dev <
> llvm-dev at lists.llvm.org> wrote:
>
>> Hi
>>
>> My goal is that given a binary and the corresponding input. I want to
>> know what IR level basic blocks are covered. I need the detail information,
>> which is the set of all the covered BBs rather than just a number.
>>
>> I want to know whether there are some tools that can support this
>> requirements. If not, I think maybe instrumentation can helps. However, I
>> do not know too much about this. Any suggestions or ideas are welcome.
>> Thank you so much
>>
>> Regards
>> Muhui
>>
> _______________________________________________
>> LLVM Developers mailing list
>> llvm-dev at lists.llvm.org
>> http://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-dev
>
>
>>
>
> --
> Regards,
> Peter Teoh
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20180903/691fe0ec/attachment.html>