Author: kcc Date: Mon Jan 23 18:57:31 2017 New Revision: 292862 URL: http://llvm.org/viewvc/llvm-project?rev=292862&view=rev Log: [sanitizer-coverage] emit __sanitizer_cov_trace_pc_guard w/o a preceding 'if' by default. Update the docs, also add deprecation notes around other parts of sanitizer coverage
Modified: cfe/trunk/docs/SanitizerCoverage.rst Modified: cfe/trunk/docs/SanitizerCoverage.rst URL: http://llvm.org/viewvc/llvm-project/cfe/trunk/docs/SanitizerCoverage.rst?rev=292862&r1=292861&r2=292862&view=diff ============================================================================== --- cfe/trunk/docs/SanitizerCoverage.rst (original) +++ cfe/trunk/docs/SanitizerCoverage.rst Mon Jan 23 18:57:31 2017 @@ -227,7 +227,8 @@ easily used for bitset-based corpus dist Caller-callee coverage ====================== -(Experimental!) +**Deprecated, don't use** + Every indirect function call is instrumented with a run-time function call that captures caller and callee. At the shutdown time the process dumps a separate file called ``caller-callee.PID.sancov`` which contains caller/callee pairs as @@ -253,6 +254,8 @@ Current limitations: Coverage counters ================= +**Deprecated, don't use** + This experimental feature is inspired by `AFL <http://lcamtuf.coredump.cx/afl/technical_details.txt>`__'s coverage instrumentation. With additional compile-time and run-time flags you can get @@ -296,6 +299,9 @@ These counters may also be used for in-p Tracing basic blocks ==================== + +**Deprecated, don't use** + Experimental support for basic block (or edge) tracing. With ``-fsanitize-coverage=trace-bb`` the compiler will insert ``__sanitizer_cov_trace_basic_block(s32 *id)`` before every function, basic block, or edge @@ -319,6 +325,9 @@ Basic block tracing is currently support Tracing PCs =========== + +**Deprecated, don't use** + *Experimental* feature similar to tracing basic blocks, but with a different API. With ``-fsanitize-coverage=trace-pc`` the compiler will insert ``__sanitizer_cov_trace_pc()`` on every edge. @@ -331,16 +340,13 @@ and can be used with `AFL <http://lcamtu Tracing PCs with guards ======================= -Another *experimental* feature that tries to combine the functionality of `trace-pc`, -`8bit-counters` and boolean coverage. With ``-fsanitize-coverage=trace-pc-guard`` the compiler will insert the following code on every edge: .. code-block:: none - if (guard_variable) - __sanitizer_cov_trace_pc_guard(&guard_variable) + __sanitizer_cov_trace_pc_guard(&guard_variable) Every edge will have its own `guard_variable` (uint32_t). @@ -352,7 +358,7 @@ The compler will also insert a module co // This function may be called multiple times with the same values of start/stop. __sanitizer_cov_trace_pc_guard_init(uint32_t *start, uint32_t *stop); -Similarly to `trace-pc,indirect-calls`, with `trace-pc-guards,indirect-calls` +With `trace-pc-guards,indirect-calls` ``__sanitizer_cov_trace_pc_indirect(void *callee)`` will be inserted on every indirect call. The functions `__sanitizer_cov_trace_pc_*` should be defined by the user. _______________________________________________ cfe-commits mailing list cfe-commits@lists.llvm.org http://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits