Justin Bogner via llvm-dev
2017-Mar-07 20:34 UTC
[llvm-dev] sancov reporting all locations as <invalid>:0
I'm working on a fuzzer using libFuzzer and I wanted to take a look at how my coverage was doing, as per the instructions here: http://llvm.org/docs/LibFuzzer.html#how-good-is-my-fuzzer First of all, I suspect the instructions there are out of date, but passing -dump_coverage=1 to the binary rather than setting ASAN_OPTIONS generated a .sancov file for me. However, when I inspect this with the sancov tool, all of the line numbers it reports are "<invalid>:0". I can list the covered and uncovered functions successfully, but without locations it's really hard to do anything with that information. I've built with -gline-tables-only, as is the default when building llvm with sanitizers enabled. Have you seen this before? Am I doing something obviously wrong?
Kostya Serebryany via llvm-dev
2017-Mar-07 20:36 UTC
[llvm-dev] sancov reporting all locations as <invalid>:0
+aizatsky On Tue, Mar 7, 2017 at 12:34 PM, Justin Bogner <mail at justinbogner.com> wrote:> I'm working on a fuzzer using libFuzzer and I wanted to take a look at > how my coverage was doing, as per the instructions here: > > http://llvm.org/docs/LibFuzzer.html#how-good-is-my-fuzzer > > First of all, I suspect the instructions there are out of date, but > passing -dump_coverage=1 to the binary rather than setting ASAN_OPTIONS > generated a .sancov file for me. > > However, when I inspect this with the sancov tool, all of the line > numbers it reports are "<invalid>:0". I can list the covered and > uncovered functions successfully, but without locations it's really hard > to do anything with that information. > > I've built with -gline-tables-only, as is the default when building llvm > with sanitizers enabled. > > Have you seen this before? Am I doing something obviously wrong? >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20170307/f98dcdac/attachment.html>
Mike Aizatsky via llvm-dev
2017-Mar-07 20:50 UTC
[llvm-dev] sancov reporting all locations as <invalid>:0
Justin, I haven't seen this before. I suspect it is because of line-tables-only. Can you try it with full debug info? On Tue, Mar 7, 2017 at 12:36 PM Kostya Serebryany <kcc at google.com> wrote:> +aizatsky > > On Tue, Mar 7, 2017 at 12:34 PM, Justin Bogner <mail at justinbogner.com> > wrote: > > I'm working on a fuzzer using libFuzzer and I wanted to take a look at > how my coverage was doing, as per the instructions here: > > http://llvm.org/docs/LibFuzzer.html#how-good-is-my-fuzzer > > First of all, I suspect the instructions there are out of date, but > passing -dump_coverage=1 to the binary rather than setting ASAN_OPTIONS > generated a .sancov file for me. > > However, when I inspect this with the sancov tool, all of the line > numbers it reports are "<invalid>:0". I can list the covered and > uncovered functions successfully, but without locations it's really hard > to do anything with that information. > > I've built with -gline-tables-only, as is the default when building llvm > with sanitizers enabled. > > Have you seen this before? Am I doing something obviously wrong? > > > --Mike Sent from phone -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20170307/a2e0a363/attachment.html>