使用LLVM LibFuzzer时，“fsantize-coverage=edge”中的“edge”值无效

Question

http://llvm.org/docs/LibFuzzer.html，我正在做一些工作与libfuzzer现在，但当我做官方玩具的例子。当我运行这个命令时：

clang++ -fsanitize=address -fsanitize-coverage=edge test-fuzzer.cc Fuzzer*.o

发生了一个错误

clang: error: invalid value 'edge' in 'fsanitize-coverage=edge'

似乎clang支持这个论点，但我想知道如何才能看到支持什么价值.我用apt-get安装了llvm 3.6和unbuntu14.04.

Answer 1

fsanitize-coverage=标志的语法已经改变了，正如此提交消息从2015年5月开始描述的那样。这一点与你特别相关：

Original semantics of -fsanitize-coverage flag is preserved:
  * -fsanitize-coverage=0 disables the coverage
  * -fsanitize-coverage=1 is a synonym for -fsanitize-coverage=func
  * -fsanitize-coverage=2 is a synonym for -fsanitize-coverage=bb
  * -fsanitize-coverage=3 is a synonym for -fsanitize-coverage=edge
  * -fsanitize-coverage=4 is a synonym for -fsanitize-coverage=edge,indirect-calls

所以你可以试试-fsanitize-coverage=3。