Compiler-assisted-fuzzing / llvm-project

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.
http://llvm.org
Other
0 stars 0 forks source link

L1I: Splitting function across generated binary #15

Open ArsenyBochkarev opened 6 days ago

ArsenyBochkarev commented 6 days ago

We need to fuzz L1I caches by splitting basic blocks from it more or less evenly across the binary being generated. This can be achieved by using the HotColdSplitting pass unconditionally for as much BBs as possible

The effect we're trying to achieve here is something close to cache contention.

ArsenyBochkarev commented 6 days ago

I was able to utilize the HotColdSplitting pass for that purpose:

The test used for this pass: test.txt

Results with and without --fuzz=l1i option:

Fuzzed: fuzzed_res.txt

Nonfuzzed: nonfuzzed_res.txt