aboutsummaryrefslogtreecommitdiff
path: root/tests/qtest/fuzz/fork_fuzz.ld
blob: b23a59f194138885e19f8817e6ddfb60f1b2f322 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
/* We adjust linker script modification to place all of the stuff that needs to
 * persist across fuzzing runs into a contiguous seciton of memory. Then, it is
 * easy to re-map the counter-related memory as shared.
*/

SECTIONS
{
  .data.fuzz_start : ALIGN(4K)
  {
      __FUZZ_COUNTERS_START = .;
      __start___sancov_cntrs = .;
      *(_*sancov_cntrs);
      __stop___sancov_cntrs = .;

      /* Lowest stack counter */
      *(__sancov_lowest_stack);
  }
  .data.fuzz_ordered :
  {
      /* Coverage counters. They're not necessary for fuzzing, but are useful
       * for analyzing the fuzzing performance
       */
      __start___llvm_prf_cnts = .;
      *(*llvm_prf_cnts);
      __stop___llvm_prf_cnts = .;

      /* Internal Libfuzzer TracePC object which contains the ValueProfileMap */
      FuzzerTracePC*(.bss*);
  }
  .data.fuzz_end : ALIGN(4K)
  {
      __FUZZ_COUNTERS_END = .;
  }
}
/* Dont overwrite the SECTIONS in the default linker script. Instead insert the
 * above into the default script */
INSERT AFTER .data;