Skip to content

Commit 70f1b0c

Browse files
Minor clarifications in the documentation
1 parent c6cf677 commit 70f1b0c

File tree

2 files changed

+10
-7
lines changed

2 files changed

+10
-7
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ of PRs, we will try to merge them when possible.
99

1010
# SymCC: efficient compiler-based symbolic execution
1111

12-
SymCC is a compiler wrapper which embeds symbolic execution into the program
12+
SymCC is a compiler pass which embeds symbolic execution into the program
1313
during compilation, and an associated run-time support library. In essence, the
1414
compiler inserts code that computes symbolic expressions for each value in the
1515
program. The actual computation happens through calls to the support library at

docs/Configuration.txt

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -79,12 +79,15 @@ environment variables.
7979
repeatedly (QSYM backend only). See the QSYM paper for details; highly
8080
recommended for fuzzing and enabled automatically by the fuzzing helper.
8181

82-
- SYMCC_AFL_COVERAGE_MAP (default empty): When set to the file name of an AFL
83-
coverage map, load the map before executing the target program and use it to
84-
skip solver queries for paths that have already been covered (QSYM backend
85-
only). The map is updated in place, so beware of races when running multiple
86-
instances of SymCC! The fuzzing helper uses this to remember the state of
87-
exploration across multiple executions of the target program.
82+
- SYMCC_AFL_COVERAGE_MAP (default empty): When set to the file name of an
83+
AFL-style coverage map, load the map before executing the target program and
84+
use it to skip solver queries for paths that have already been covered (QSYM
85+
backend only). The map is updated in place, so beware of races when running
86+
multiple instances of SymCC! The fuzzing helper uses this to remember the
87+
state of exploration across multiple executions of the target program.
88+
Warning: This setting has a misleading name - while the format of the map
89+
follows (classic) AFL, the variable isn't meant to point at a map file that
90+
AFL uses too!
8891

8992
(Most people should stop reading here.)
9093

0 commit comments

Comments
 (0)