search

google / syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer
Apache License 2.0
5.3k stars 1.21k forks source link

tools/syz-cover: cannot generate coverage report #3842

Open tr4v3ler opened 1 year ago

tr4v3ler commented 1 year ago

I use the below command to generate coverage report:

./bin/syz-cover --kernel_obj /path/to/kernel/out/target/product/xxx/obj/KERNEL_OBJ ./rawcover

but it fails:

/path/to/kernel/out/target/product/xxx/obj/KERNEL_OBJ/vmlinux doesn't contain coverage callbacks (set CONFIG_KCOV=y on linux)

I have checked the output .config file and I am sure that I have set CONFIG_KCOV=y.

a-nogikh commented 1 year ago

What kernel version/config/compiler are you using?

I've just compiled the latest Linux RC and syz-cover works fine.

$ git checkout v6.4-rc6
$ make CC=clang defconfig
$ ./scripts/config -e KCOV
$ ./scripts/config -e DEBUG_INFO_DWARF4
$ make CC=clang olddefconfig
$ make CC=clang -j64
tr4v3ler commented 1 year ago

What kernel version/config/compiler are you using?

I've just compiled the latest Linux RC and syz-cover works fine.

$ git checkout v6.4-rc6
$ make CC=clang defconfig
$ ./scripts/config -e KCOV
$ ./scripts/config -e DEBUG_INFO_DWARF4
$ make CC=clang olddefconfig
$ make CC=clang -j64

Android 5.10 kernel. When syz-manager is running, coverage related data can be seen on the web interface, but all code does not have color highlighting.

tonight123456 commented 1 year ago

I have met this problem these days.linux-5.10。

I use the below command to generate coverage report: ./bin/syz-cover --kernel_obj /path/to/kernel/out/target/product/xxx/obj/KERNEL_OBJ ./rawcover but it fails: /path/to/kernel/out/target/product/xxx/obj/KERNEL_OBJ/vmlinux doesn't contain coverage callbacks (set CONFIG_KCOV=y on linux) I have checked the output .config file and I am sure that I have set CONFIG_KCOV=y.