search for: 384615

...DONE cov: 253 bits: 901 indir: 12 units: 467 exec/s: 526315 > #10000000 DONE cov: 63 bits: 95 indir: 1 units: 64 exec/s: 476190 > #10000000 DONE cov: 252 bits: 923 indir: 12 units: 491 exec/s: 454545 > #10000000 DONE cov: 253 bits: 880 indir: 12 units: 471 exec/s: 384615 > > Similar things happen with other binaries: > for S in 1 2 3 4 5 6; do ./target-asan-8bit-nopru-build/fuzzer -seed=$S -runs=10000000 2>&1 | grep DONE & done > #10000000 DONE cov: 103 bits: 190 indir: 1 units: 62 exec/s: 526315 > #10000000 DONE cov: 44...

...253 bits: 901 indir: 12 units: 467 exec/s: 526315 >> #10000000 DONE cov: 63 bits: 95 indir: 1 units: 64 exec/s: 476190 >> #10000000 DONE cov: 252 bits: 923 indir: 12 units: 491 exec/s: 454545 >> #10000000 DONE cov: 253 bits: 880 indir: 12 units: 471 exec/s: 384615 >> >> Similar things happen with other binaries: >> for S in 1 2 3 4 5 6; do ./target-asan-8bit-nopru-build/fuzzer -seed=$S -runs=10000000 2>&1 | grep DONE & done >> #10000000 DONE cov: 103 bits: 190 indir: 1 units: 62 exec/s: 526315 >> #10000000...

Hello, Is this reproducible? > Fuzzing is a probabilistic business and one or even two runs don't prove > much. > I've reproduced the behavior on two different machines. Attached is a script to do so. To use the script, - create an empty folder and copy both prune-blocks.sh and ff-http-parser.sh in there - ensure clang and clang++ are in your $PATH - cd /path/to/prune-blocks.sh