From 6bd77df8fc37c0633388aede21a0c6beffcc835c Mon Sep 17 00:00:00 2001 From: Stephen Crane Date: Wed, 13 Jan 2021 14:05:41 -0800 Subject: trusty: Write out sancov file when fuzzer exits Add emission of sancov file when CoverageRecord is destroyed. This will occur when a fuzzer driver exits cleanly, i.e. -runs=0 with an existing corpus. Test: make trusty_gatekeeper_fuzzer Test: adb shell ./trusty_gatekeeper_fuzzer -runs=0 corpus Bug: 175221942 Change-Id: I6bd1c8b2f2091e894c35f7a4874b54577a91c8fc --- trusty/coverage/coverage.cpp | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'trusty/coverage/coverage.cpp') diff --git a/trusty/coverage/coverage.cpp b/trusty/coverage/coverage.cpp index ff2bcaa11..185abe549 100644 --- a/trusty/coverage/coverage.cpp +++ b/trusty/coverage/coverage.cpp @@ -21,6 +21,7 @@ #include #include #include +#include #include #include #include @@ -38,6 +39,7 @@ namespace coverage { using android::base::ErrnoError; using android::base::Error; using std::string; +using std::unique_ptr; static inline uintptr_t RoundPageUp(uintptr_t val) { return (val + (PAGE_SIZE - 1)) & ~(PAGE_SIZE - 1); @@ -47,12 +49,29 @@ CoverageRecord::CoverageRecord(string tipc_dev, struct uuid* uuid) : tipc_dev_(std::move(tipc_dev)), coverage_srv_fd_(-1), uuid_(*uuid), + sancov_filename_(), + record_len_(0), + shm_(NULL), + shm_len_(0) {} + +CoverageRecord::CoverageRecord(string tipc_dev, struct uuid* uuid, string sancov_filename) + : tipc_dev_(std::move(tipc_dev)), + coverage_srv_fd_(-1), + uuid_(*uuid), + sancov_filename_(sancov_filename), record_len_(0), shm_(NULL), shm_len_(0) {} CoverageRecord::~CoverageRecord() { if (shm_) { + if (sancov_filename_) { + auto res = SaveSancovFile(*sancov_filename_); + if (!res.ok()) { + ALOGE("Could not write sancov file for module: %s\n", sancov_filename_->c_str()); + } + } + munmap((void*)shm_, shm_len_); } } -- cgit v1.2.3