android_system_core/trusty/fuzz
Stephen Crane e54e8d4ebf Trusty: Move tipc fuzzer connection to end of iteration
We detect a TA crash by not being able to reconnect to its channel. We
were previously connecting to the TA at the beginning of each fuzz
iteration, but this results in only detecting a crash on the following
iteration. By moving this connection to the end of the fuzz iteration,
we can detect a crash corresponding to the correct fuzz iteration and
libFuzzer will produce the correct crashing input.

Test: /data/fuzz/arm64/trusty_keymaster_fuzzer/trusty_keymaster_fuzzer
Bug: 185407818
Change-Id: I6808c72611fcabab5b314218f8b588dd7d944188
2021-04-15 01:02:50 +00:00
..
include/trusty/fuzz Trusty: Move tipc fuzzer connection to end of iteration 2021-04-15 01:02:50 +00:00
test enable fuzzing trusty targets automatically 2021-03-11 15:07:01 +00:00
Android.bp enable fuzzing trusty targets automatically 2021-03-11 15:07:01 +00:00
counters.cpp Merge "trusty: Increase maximum number of coverage counters" 2021-02-25 06:22:39 +00:00
tipc_fuzzer.cpp Trusty: Move tipc fuzzer connection to end of iteration 2021-04-15 01:02:50 +00:00
utils.cpp Trusty: Move tipc fuzzer connection to end of iteration 2021-04-15 01:02:50 +00:00