File tree Expand file tree Collapse file tree 2 files changed +10
-7
lines changed Expand file tree Collapse file tree 2 files changed +10
-7
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ of PRs, we will try to merge them when possible.
9
9
10
10
# SymCC: efficient compiler-based symbolic execution
11
11
12
- SymCC is a compiler wrapper which embeds symbolic execution into the program
12
+ SymCC is a compiler pass which embeds symbolic execution into the program
13
13
during compilation, and an associated run-time support library. In essence, the
14
14
compiler inserts code that computes symbolic expressions for each value in the
15
15
program. The actual computation happens through calls to the support library at
Original file line number Diff line number Diff line change @@ -79,12 +79,15 @@ environment variables.
79
79
repeatedly (QSYM backend only). See the QSYM paper for details; highly
80
80
recommended for fuzzing and enabled automatically by the fuzzing helper.
81
81
82
- - SYMCC_AFL_COVERAGE_MAP (default empty): When set to the file name of an AFL
83
- coverage map, load the map before executing the target program and use it to
84
- skip solver queries for paths that have already been covered (QSYM backend
85
- only). The map is updated in place, so beware of races when running multiple
86
- instances of SymCC! The fuzzing helper uses this to remember the state of
87
- exploration across multiple executions of the target program.
82
+ - SYMCC_AFL_COVERAGE_MAP (default empty): When set to the file name of an
83
+ AFL-style coverage map, load the map before executing the target program and
84
+ use it to skip solver queries for paths that have already been covered (QSYM
85
+ backend only). The map is updated in place, so beware of races when running
86
+ multiple instances of SymCC! The fuzzing helper uses this to remember the
87
+ state of exploration across multiple executions of the target program.
88
+ Warning: This setting has a misleading name - while the format of the map
89
+ follows (classic) AFL, the variable isn't meant to point at a map file that
90
+ AFL uses too!
88
91
89
92
(Most people should stop reading here.)
90
93
You can’t perform that action at this time.
0 commit comments