Skip to content

Commit a4df08e

Browse files
docs: Include a comment for fuzz execution.
1 parent 483410b commit a4df08e

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

compiler/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ Coverage-guided fuzzing of the lex -> parse -> VM pipeline lives in [`fuzz-afl/`
7272
cd compiler/fuzz-afl
7373
./seeds.sh # generate corpus + dictionary from vm.json (once)
7474
cargo afl build # instrument on stable, no nightly
75-
cargo afl fuzz -i in -o out -x edge.dict target/debug/afl-pipeline
75+
cargo afl fuzz -i in -o out -x edge.dict target/debug/afl-pipeline # runs until Ctrl-C; add -V 300 to stop after 300s
7676
```
7777

7878
Seeds and the dictionary are generated from `tests/cases/vm.json`, so they are gitignored. Under WSL, prefix the fuzz command with `AFL_SKIP_CPUFREQ=1 AFL_I_DONT_CARE_ABOUT_MISSING_CRASHES=1`. See [Fuzzing](https://edgepython.com/implementation/fuzzing) for details.

docs/pages/implementation/fuzzing.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ The target runs the VM under `Limits::sandbox()`, so runaway loops and allocatio
1515
cd compiler/fuzz-afl
1616
./seeds.sh # generate corpus + dictionary from vm.json (once)
1717
cargo afl build # instrument on stable, no nightly
18-
cargo afl fuzz -i in -o out -x edge.dict target/debug/afl-pipeline
18+
cargo afl fuzz -i in -o out -x edge.dict target/debug/afl-pipeline # runs until Ctrl-C; add -V 300 to stop after 300s
1919
```
2020

2121
Under WSL, prefix the fuzz command with `AFL_SKIP_CPUFREQ=1 AFL_I_DONT_CARE_ABOUT_MISSING_CRASHES=1` to bypass the core-pattern and CPU-governor checks. Crashes and hangs land in `out/default/`. Reproduce one by piping it back into the target:

0 commit comments

Comments
 (0)