About
Rust bindings to LLVM's SanitizerCoverage
interface.
Using these bindings allows you to convey additional coverage information to the SanitizerCoverage
consumer, which is typically a fuzzer like libFuzzer
. You can, for example, convey edge coverage information inside JIT code or which size classes are being allocated from in your custom allocator that would otherwise not be made visible by LLVM's inserted coverage instrumentation.
Example
use sancov::Counters;
// Define a bunch of counters.
static COUNTERS: Counters<4096> = Counters::new();
// Register the counters with the `SanitizerCoverage` consumer.
COUNTERS.register();
// Increment a counter when some custom code is executed!
COUNTERS[42].increment()