#fuzzing #fuzz #coverage #counters

sancov

Rust bindings to LLVM’s SanitizerCoverage interface

1 unstable release

Uses new Rust 2021

0.1.0 Sep 16, 2022

#317 in Testing

21 downloads per month

MIT/Apache

11KB
72 lines

sancov

Rust bindings to LLVM's SanitizerCoverage interface.

GitHub Actions Status Documentation Status

About

Rust bindings to LLVM's SanitizerCoverage interface.

Using these bindings allows you to convey additional coverage information to the SanitizerCoverage consumer, which is typically a fuzzer like libFuzzer. You can, for example, convey edge coverage information inside JIT code or which size classes are being allocated from in your custom allocator that would otherwise not be made visible by LLVM's inserted coverage instrumentation.

Example

use sancov::Counters;

// Define a bunch of counters.
static COUNTERS: Counters<4096> = Counters::new();

// Register the counters with the `SanitizerCoverage` consumer.
COUNTERS.register();

// Increment a counter when some custom code is executed!
COUNTERS[42].increment()

Dependencies