Philipp Görz

SBFT24 Competition

42

This PR combines all fuzzers submitted to SBFT24 and the mutation measurer to allow experiments for the competition.

Add new measurer based on Mutation Analysis

57

We recently published a [paper](https://www.usenix.org/conference/usenixsecurity23/presentation/gorz) describing an approach to use mutation analysis for fuzzer benchmarking. This pull request aims to support this approach (Phase I only) for FuzzBench. ---- There...

How are values larger than u64 handled for Constant::Int?

3

Hey, first of all thank you for this lib, it is very nice to work with! I noticed that llvm can have int values of arbitrary size, one example mentions...

Explicit Tail Calls

261

This RFC proposes a feature to provide a guarantee that function calls are tail-call eliminated via the `become` keyword. If this guarantee can not be provided an error is generated...

[infra] Indicate coverage run failure when libFuzzer reports an error

6

Currently OOM's and timeouts for individual corpus entries during coverage measurement are silently ignored, as libFuzzer still exits with a zero returncode. This PR adds a grep for error messages...

statefulness detector

2

Add a statefulness detection step as part of coverage measurement to detect if the fuzz target is stateful. Compare the coverage measurement output by running the corpus in two different...

Non-zero return values from LLVMFuzzerTestOneInput should be discouraged

1

Hi, I was investigating a [fuzzer target/harness](https://storage.googleapis.com/oss-fuzz-coverage/civetweb/reports-by-target/20250119/civetweb_fuzz1/linux/src/civetweb/fuzztest/fuzzmain.c.html#L206) that for some reason failed to create any meaningful coverage. Turns out that libFuzzer discards any inputs where the return value for LLVMFuzzerTestOneInput...

Close to zero coverage in oss-fuzz

4

Hey, I'm currently looking into projects that have low coverage in oss-fuzz. (You can find an overview of this project here: https://introspector.oss-fuzz.com/project-profile?project=tpm2-tss.) This project seems to have close to zero...

[Bug]: Build fails in oss-fuzz

1

### Describe the issue Not sure if this is monitored but the issue is tracked here: https://issues.oss-fuzz.com/issues/390244458 The latest build log can be found here: https://oss-fuzz-build-logs.storage.googleapis.com/log-d30adebb-9f03-457c-8724-5fc474e50422.txt ``` compiler:emscripten': target 'emscripten'...