User: Enable security predicate checking

acidanthera · Feb 5, 2022 · 30798fb · 30798fb
1 parent 81eedb5
commit 30798fb
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/User/Makefile b/User/Makefile
@@ -279,8 +279,21 @@ sydr-fuzz: $(PROJECT).sydr$(SUFFIX) $(PROJECT)$(SUFFIX) FORCE
 	EOF
 	UBSAN_OPTIONS='halt_on_error=1' sydr-fuzz -l debug run -f
 
+sydr-fuzz-security: $(PROJECT).sydr$(SUFFIX) $(PROJECT)$(SUFFIX) FORCE
+	@cat <<- EOF > sydr-fuzz.toml
+	 	[sydr]
+		args = "--security --no-invert"
+		target = "$(PROJECT).sydr$(SUFFIX) @@"
+		corpus = "sydr-fuzz-out/corpus"
+		jobs = $(FUZZ_JOBS)
+	EOF
+	sydr-fuzz -l debug security
+
 sydr-fuzz-import: $(PROJECT).sydr$(SUFFIX) $(PROJECT)$(SUFFIX) FORCE
+	@$(MKDIR) sydr-fuzz-out/corpus
+	@$(MKDIR) sydr-fuzz-out/security
 	./$(PROJECT)$(SUFFIX) -merge=1 $(FUZZ_DIR) sydr-fuzz-out/corpus
+	./$(PROJECT)$(SUFFIX) -merge=1 $(FUZZ_DIR) sydr-fuzz-out/security
 
 coverage: $(PRODUCT) FORCE
 	@$(LCOV) --version

diff --git a/User/README.md b/User/README.md
@@ -72,6 +72,8 @@ Example 4. Perform fuzzing with the help of [Sydr](https://www.ispras.ru/en/tech
 ```sh
 CC=clang DEBUG=1 FUZZ=1 SANITIZE=1 make
 CC=clang DEBUG=1 SYDR=1 make sydr-fuzz
+# Optionally check for security predicates.
+CC=clang DEBUG=1 SYDR=1 make sydr-fuzz-security
 # Import Sydr inputs to FUZZDICT.
 CC=clang DEBUG=1 SYDR=1 make sydr-fuzz-import
 # LCOV is required for running this command.