diff options
| author | van Hauser <vh@thc.org> | 2020-04-06 13:33:49 +0200 |
|---|---|---|
| committer | van Hauser <vh@thc.org> | 2020-04-09 10:23:37 +0200 |
| commit | ccbcb5c8d3e8cee8fbab49025429a8b7b7a4ee52 (patch) | |
| tree | 245765666a782044c6015d7c8774d89bc8eba210 /llvm_mode/README.instrim.md | |
| parent | 2f172d6c5a200184ab0bf869d2cca80cad720c73 (diff) | |
| download | afl++-ccbcb5c8d3e8cee8fbab49025429a8b7b7a4ee52.tar.gz | |
added AFL_LLVM_INSTRUMENT, made USE_TRACE_PC obselete and llvm_mode Makefile fix, fixed for FUSELD (for LTO)
Diffstat (limited to 'llvm_mode/README.instrim.md')
| -rw-r--r-- | llvm_mode/README.instrim.md | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/llvm_mode/README.instrim.md b/llvm_mode/README.instrim.md index 5c3f32c8..b905af11 100644 --- a/llvm_mode/README.instrim.md +++ b/llvm_mode/README.instrim.md @@ -5,13 +5,12 @@ InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing ## Introduction InsTrim uses CFG and markers to instrument just what is necessary in the -binary in llvm_mode. It is about 20-25% faster but as a cost has a lower -path discovery. +binary in llvm_mode. It is about 10-15% faster without disadvantages. ## Usage -Set the environment variable `AFL_LLVM_INSTRIM=1` during compilation of -the target. +Set the environment variable `AFL_LLVM_INSTRUMENT=CFG` or `AFL_LLVM_INSTRIM=1` +during compilation of the target. There is also an advanced mode which instruments loops in a way so that afl-fuzz can see which loop path has been selected but not being able to |