| # Code that we actually want the fuzzer to target | |
| # See: https://clang.llvm.org/docs/SanitizerCoverage.html#disabling-instrumentation-without-source-modification | |
| # | |
| src:*/hw/* | |
| src:*/include/hw/* | |
| src:*/slirp/* | |
| src:*/net/* | |
| # We don't care about coverage over fuzzer-specific code, however we should | |
| # instrument the fuzzer entry-point so libFuzzer always sees at least some | |
| # coverage - otherwise it will exit after the first input | |
| src:*/tests/qtest/fuzz/fuzz.c | |
| # Enable instrumentation for all functions in those files | |
| fun:* |