Lines Matching +full:all +full:- +full:inputs +full:- +full:2
1 //===- FuzzerFlags.def - Run-time flags -------------------------*- C++ -* ===//
5 // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
7 //===----------------------------------------------------------------------===//
11 //===----------------------------------------------------------------------===//
14 FUZZER_FLAG_INT(runs, -1,
15 "Number of individual test runs (-1 for infinite runs).")
19 FUZZER_FLAG_INT(len_control, 100, "Try generating small inputs first, "
20 "then try larger inputs over time. Specifies the rate at which the length "
21 "limit is increased (smaller == faster). If 0, immediately try inputs with "
23 FUZZER_FLAG_STRING(seed_inputs, "A comma-separated list of input files "
25 "the name of a file containing the comma-separated list.")
26 FUZZER_FLAG_INT(keep_seed, 0, "If 1, keep seed inputs in the corpus even if "
28 "seed inputs will never be reduced. This option can be useful when seeds are"
30 FUZZER_FLAG_INT(cross_over, 1, "If 1, cross over inputs.")
32 "uniform probability distribution when choosing inputs to cross over with. "
33 "Some of the inputs in the corpus may never get chosen for mutation "
34 "depending on the input mutation scheduling policy. With this flag, all "
35 "inputs, regardless of the input mutation scheduling policy, can be chosen "
37 "|keep_seed==1|; all the initial seed inputs, even though they do not "
45 FUZZER_FLAG_INT(shuffle, 1, "Shuffle inputs at startup")
47 "If 1, always prefer smaller inputs during the corpus shuffle.")
61 FUZZER_FLAG_INT(fork_corpus_groups, 0, "For fork mode, enable the corpus-group "
63 "and each sub-process will randomly select seeds from different "
64 "groups as the sub-corpus.")
68 FUZZER_FLAG_INT(merge, 0, "If 1, the 2-nd, 3-rd, etc corpora will be "
69 "merged into the 1-st corpus. Only interesting units will be taken. "
71 FUZZER_FLAG_INT(set_cover_merge, 0, "If 1, the 2-nd, 3-rd, etc corpora will be "
72 "merged into the 1-st corpus. Same as the 'merge' flag, but uses the "
85 " crash input. Use with -runs=N or -max_total_time=N to limit "
87 " Use with -exact_artifact_path to specify the output."
93 " Use with -exact_artifact_path to specify the output."
111 FUZZER_FLAG_INT(shrink, 0, "Experimental. Try to shrink corpus inputs.")
113 "Try to reduce the size of inputs while preserving their full feature sets")
116 " with stdout/stderr redirected to fuzz-JOB.log.")
119 " If zero, \"min(jobs,NumberOfCpuCores()/2)\" is used.")
126 "If 1, generate only ASCII (isprint+isspace) inputs.")
129 "timeout, or slow inputs) as "
133 "as $(exact_artifact_path). This overrides -artifact_prefix "
137 FUZZER_FLAG_INT(print_funcs, 2, "If >=1, print out at most this number of "
145 "(all branches) as text at exit.")
160 "if 2, close stderr; if 3, close both. "
167 "purge_allocator_interval=-1 to disable this functionality.")
168 FUZZER_FLAG_INT(trace_malloc, 0, "If >= 1 will print all mallocs/frees. "
169 "If >= 2 will also print stack traces.")
170 FUZZER_FLAG_INT(rss_limit_mb, 2048, "If non-zero, the fuzzer will exit upon "
172 FUZZER_FLAG_INT(malloc_limit_mb, 0, "If non-zero, the fuzzer will exit "
176 " from the given source location. Example: -exit_on_src_pos=foo.cc:123. "
181 FUZZER_FLAG_INT(ignore_remaining_args, 0, "If 1, ignore all arguments passed "
185 "Fuzzing will focus on inputs that trigger calls to this function. "
186 "If -focus_function=auto and -data_flow_trace is used, libFuzzer "
187 "will choose the focus functions automatically. Disables -entropic when "
191 "entropic is enabled, all features which are observed less often than "
195 "Top-X least abundant features (union features that are considered as "
199 "time. Inputs with lower execution time get scheduled more (up to 30x). "
201 "non-zero random seed is given.")