OrgACRN
/
sof
mirror of https://github.com/thesofproject/sof.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Give fuzz.sh a `proper -h` help text 

Long overdue.

Signed-off-by: Marc Herbert <marc.herbert@intel.com>
This commit is contained in:
Marc Herbert 2023-12-15 19:24:27 +00:00 committed by Liam Girdwood
parent 03fe9d3149
commit de28dd5fe5
1 changed files with 44 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
scripts/fuzz.sh
View File

@ -4,28 +4,50 @@ set -e
print_help() print_help()
{ {
cat <<EOFHELP cat <<EOFHELP
# Simple wrapper around a libfuzzer test run, as much for
# documentation as direct use. The idea here is really simple: build Usage:
# for the Zephyr "native_posix" board (which is a just a x86
# executable for the build host, not an emulated device) and run the $0 -b -- -DOVERLAY_CONFIG=stub_build_all_ipc4.conf -DEXTRA_CFLAGS=...
# resulting zephyr.exe file. This specifies a "fuzz_corpus" directory $0 -t 500 -- -DOVERLAY_CONFIG=stub_build_all_ipc3.conf ...
# to save the seeds that produce useful coverage output for use in
# repeated runs (these are not particularly large, we might consider
# curating and commiting such a seed directory to the tree). -b Do not run/fuzz: stop after the build.
# -t n Fuzz for n seconds.
# The tool will run until it finds a failure condition. You will see -o ofile Redirect the fuzzer's extremely verbose stdout. The
# MANY errors on stdout from all the randomized input. Don't try to relatively verbose stderr is not redirected by -o.
# capture this, either let it output to a terminal or arrange to keep
# only the last XXX lines after the tool exits. Arguments after -- are passed as is to CMake (through west).
# When passing conflicting -DVAR='VAL UE1' -DVAR='VAL UE2' to CMake,
# The only prerequisite to install is a clang compiler on the host. the last 'VAL UE2' wins; previous values are silently ignored.
# Versions 12+ have all been observed to work.
# Fuzzing happens to require stubbing which provides a great solution to
# You will need the kconfigs specified below for correct operation, compile-check many CONFIG_* at once. So you can stop after the build
# but can add more at the end of this script's command line to with the -b option.
# duplicate configurations as needed. Alternatively you can pass
# overlay files in kconfig syntax via: Simple wrapper around a libfuzzer test run, as much for
# fuzz.sh -t 300 -- -DOVERLAY_CONFIG=..., etc... documentation as direct use. The idea here is really simple: build
for the Zephyr "native_posix" board (which is a just a x86
executable for the build host, not an emulated device) and run the
resulting zephyr.exe file. This specifies a "fuzz_corpus" directory
to save the seeds that produce useful coverage output for use in
repeated runs (these are not particularly large, we might consider
curating and committing such a seed directory to the tree).
The tool will run until it finds a failure condition. You will see
MANY errors on stdout from all the randomized input. Don't try to
capture this, either let it output to a terminal or arrange to keep
only the last XXX lines after the tool exits.
The only prerequisite to install is a clang compiler on the host.
Versions 12+ have all been observed to work.
You will need the kconfigs specified below for correct operation,
but can add more at the end of this script's command line to
duplicate configurations as needed. Alternatively you can pass
overlay files in kconfig syntax via:
fuzz.sh -t 300 -- -DOVERLAY_CONFIG=... -DEXTRA_CFLAGS='-Wone -Wtwo' ...
EOFHELP EOFHELP
} }