Skip to content

workloads/lnd: map coverage counters directly onto AFL's map - #261

Open
erickcestari wants to merge 1 commit into
lnfuzz:masterfrom
erickcestari:lnd-direct-coverage-map
Open

erickcestari wants to merge 1 commit into
lnfuzz:masterfrom
erickcestari:lnd-direct-coverage-map

Conversation

@erickcestari

@erickcestari erickcestari commented Sep 18, 2026

Copy link
Copy Markdown
Contributor

Remap Go's libfuzzer counter section onto the AFL shared memory instead of copying it on every sync. Startup coverage no longer pollutes every map, and crashing or timed-out inputs now report coverage.

The trigger/ack pipes stay as a liveness handshake: try_wait still sees a just-crashed LND as running.

I didn't yet run an evaluation to see the coverage increasing, but this should align the coverage report with the others implementation. Where the startup coverage don't pollute every map, since each input will be started from a zeroed map.

Remap Go's libfuzzer counter section onto the AFL shared memory instead
of copying it on every sync. Startup coverage no longer pollutes every
map, and crashing or timed-out inputs now report coverage.

The trigger/ack pipes stay as a liveness handshake: try_wait still sees
a just-crashed LND as running.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant