oss-fuzz/docs/reference.md

1.3 KiB

Reference

Sanitizers

Fuzzers are usualy built with one or more sanitizer enabled. You can select sanitizer configuration by specifying $SANITIZER build environment varible using -e option:

python infra/helper.py build_fuzzers -e SANITIZER=undefined json

Supported sanitizers:

$SANITIZER Description
address (default) Address Sanitizer with Leak Sanitizer.
undefined Undefined Behavior Sanitizer.
memory Memory Sanitizer. NOTE: It is critical that you build all the code in your program (including libraries it uses) with memory sanitizer.

Compiler flag values for predefined configurations are specified in the Dockerfile. These flags can be overriden by specifying $SANITIZER_FLAGS directly.

You can choose which configurations to automatically run your fuzzers with in project.yaml file (sqlite3):

sanitizers:
  - address
  - undefined