|  | # Code that we actually want the fuzzer to target | 
|  | # See: https://clang.llvm.org/docs/SanitizerCoverage.html#disabling-instrumentation-without-source-modification | 
|  | # | 
|  | src:*/hw/* | 
|  | src:*/include/hw/* | 
|  | src:*/slirp/* | 
|  | src:*/net/* | 
|  |  | 
|  | # We don't care about coverage over fuzzer-specific code, however we should | 
|  | # instrument the fuzzer entry-point so libFuzzer always sees at least some | 
|  | # coverage - otherwise it will exit after the first input | 
|  | src:*/tests/qtest/fuzz/fuzz.c | 
|  |  | 
|  | # Enable instrumentation for all functions in those files | 
|  | fun:* |