sancov

Rust bindings to LLVM's SanitizerCoverage interface.

About

Rust bindings to LLVM's SanitizerCoverage interface.

Using these bindings allows you to convey additional coverage information to the SanitizerCoverage consumer, which is typically a fuzzer like libFuzzer. You can, for example, convey edge coverage information inside JIT code or which size classes are being allocated from in your custom allocator that would otherwise not be made visible by LLVM's inserted coverage instrumentation.

Example

use sancov::Counters;

// Define a bunch of counters.
static COUNTERS: Counters<4096> = Counters::new();

// Register the counters with the `SanitizerCoverage` consumer.
COUNTERS.register();

// Increment a counter when some custom code is executed!
COUNTERS[42].increment()