aboutsummaryrefslogtreecommitdiff
path: root/docs/devel
diff options
context:
space:
mode:
authorAlexander Bulekov <alxndr@bu.edu>2020-07-06 15:55:32 -0400
committerThomas Huth <thuth@redhat.com>2020-07-21 07:27:28 +0200
commitee16da12d7035bffb1c990c794de8fb1a96815d7 (patch)
treea68c0aab2b0140285474c14d00658f5487cc49f9 /docs/devel
parentdd0162653c11de58331506beb8b3d85c8923149c (diff)
downloadqemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.zip
qemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.tar.gz
qemu-ee16da12d7035bffb1c990c794de8fb1a96815d7.tar.bz2
docs/fuzz: describe building fuzzers with enable-sanitizers
Signed-off-by: Alexander Bulekov <alxndr@bu.edu> Message-Id: <20200706195534.14962-3-alxndr@bu.edu> Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com> Reviewed-by: Thomas Huth <thuth@redhat.com> Signed-off-by: Thomas Huth <thuth@redhat.com>
Diffstat (limited to 'docs/devel')
-rw-r--r--docs/devel/fuzzing.txt7
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/devel/fuzzing.txt b/docs/devel/fuzzing.txt
index db5641d..12bf6aa 100644
--- a/docs/devel/fuzzing.txt
+++ b/docs/devel/fuzzing.txt
@@ -23,9 +23,12 @@ AddressSanitizer mmaps ~20TB of memory, as part of its detection. This results
in a large page-map, and a much slower fork().
To build the fuzzers, install a recent version of clang:
-Configure with (substitute the clang binaries with the version you installed):
+Configure with (substitute the clang binaries with the version you installed).
+Here, enable-sanitizers, is optional but it allows us to reliably detect bugs
+such as out-of-bounds accesses, use-after-frees, double-frees etc.
- CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing
+ CC=clang-8 CXX=clang++-8 /path/to/configure --enable-fuzzing \
+ --enable-sanitizers
Fuzz targets are built similarly to system/softmmu: