diff options
| author | Edznux <edznux@gmail.com> | 2020-10-04 16:03:15 +0200 |
|---|---|---|
| committer | Edznux <edznux@gmail.com> | 2020-10-04 16:03:15 +0200 |
| commit | 1e0bc2e5c3fff506bc8bdba9ba96530975c730f1 (patch) | |
| tree | 6cfe62b78d6d91482a1f4c240246e14458735856 /llvm_mode/README.ctx.md | |
| parent | b0de6fed11d4a8de8f016f1d8db0cb19a6b96eb2 (diff) | |
| parent | 44c0dc6d961853806a07fa05b948686392ea93fc (diff) | |
| download | afl++-1e0bc2e5c3fff506bc8bdba9ba96530975c730f1.tar.gz | |
Merge remote-tracking branch 'origin/dev' into statsd_implem
Diffstat (limited to 'llvm_mode/README.ctx.md')
| -rw-r--r-- | llvm_mode/README.ctx.md | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/llvm_mode/README.ctx.md b/llvm_mode/README.ctx.md deleted file mode 100644 index 14255313..00000000 --- a/llvm_mode/README.ctx.md +++ /dev/null @@ -1,22 +0,0 @@ -# AFL Context Sensitive Branch Coverage - -## What is this? - -This is an LLVM-based implementation of the context sensitive branch coverage. - -Basically every function gets it's own ID and that ID is combined with the -edges of the called functions. - -So if both function A and function B call a function C, the coverage -collected in C will be different. - -In math the coverage is collected as follows: -`map[current_location_ID ^ previous_location_ID >> 1 ^ previous_callee_ID] += 1` - -## Usage - -Set the `AFL_LLVM_INSTRUMENT=CTX` or `AFL_LLVM_CTX=1` environment variable. - -It is highly recommended to increase the MAP_SIZE_POW2 definition in -config.h to at least 18 and maybe up to 20 for this as otherwise too -many map collisions occur. |