<feed xmlns='http://www.w3.org/2005/Atom'>
<title>llvm-project.git/compiler-rt/lib/fuzzer/FuzzerDriver.cpp, branch main</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/'/>
<entry>
<title>[NFC] [compiler-rt] fix typos (#160803)</title>
<updated>2025-09-27T00:57:28+00:00</updated>
<author>
<name>co63oc</name>
<email>co63@163.com</email>
</author>
<published>2025-09-27T00:57:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=be6c5d0663790817291cab90248ada0117720d6a'/>
<id>be6c5d0663790817291cab90248ada0117720d6a</id>
<content type='text'>
fix typos</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
fix typos</pre>
</div>
</content>
</entry>
<entry>
<title>Reapply "[NFC] Fix CodeQL violations in compiler-rt. (#157793)" (#157913) (#159097)</title>
<updated>2025-09-16T18:11:20+00:00</updated>
<author>
<name>Amit Kumar Pandey</name>
<email>pandey.kumaramit2023@gmail.com</email>
</author>
<published>2025-09-16T18:11:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=46fd8d0db2f7f7361823efae067edddb6acc237c'/>
<id>46fd8d0db2f7f7361823efae067edddb6acc237c</id>
<content type='text'>
Fix below buildbot failure.

```
/var/lib/buildbot/fuchsia-x86_64-linux/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:172:42: error: use of undeclared identifier 'uint'
  172 |           Printf("Flag: %s %u\n", Name, (uint)Val);
```

Replace uint with uint32_t cast.

This reverts commit 8062b166762b51f1c3a9168e7031babde3e330a8.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fix below buildbot failure.

```
/var/lib/buildbot/fuchsia-x86_64-linux/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:172:42: error: use of undeclared identifier 'uint'
  172 |           Printf("Flag: %s %u\n", Name, (uint)Val);
```

Replace uint with uint32_t cast.

This reverts commit 8062b166762b51f1c3a9168e7031babde3e330a8.</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "[NFC] Fix CodeQL violations in compiler-rt. (#157793)" (#157913)</title>
<updated>2025-09-10T17:48:55+00:00</updated>
<author>
<name>Amit Kumar Pandey</name>
<email>pandey.kumaramit2023@gmail.com</email>
</author>
<published>2025-09-10T17:48:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=8062b166762b51f1c3a9168e7031babde3e330a8'/>
<id>8062b166762b51f1c3a9168e7031babde3e330a8</id>
<content type='text'>
This reverts commit b44e6e01f7f778bbb569e07821f5ddfdb90c4d4d.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit b44e6e01f7f778bbb569e07821f5ddfdb90c4d4d.</pre>
</div>
</content>
</entry>
<entry>
<title>[NFC] Fix CodeQL violations in compiler-rt. (#157793)</title>
<updated>2025-09-10T16:13:47+00:00</updated>
<author>
<name>Amit Kumar Pandey</name>
<email>137622562+ampandey-1995@users.noreply.github.com</email>
</author>
<published>2025-09-10T16:13:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=b44e6e01f7f778bbb569e07821f5ddfdb90c4d4d'/>
<id>b44e6e01f7f778bbb569e07821f5ddfdb90c4d4d</id>
<content type='text'>
This pull request addresses fixes against violations happening under
subcategory 'cpp/wrong-type-format-argument' related to
dfsan,fuzzer,hwasan.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This pull request addresses fixes against violations happening under
subcategory 'cpp/wrong-type-format-argument' related to
dfsan,fuzzer,hwasan.</pre>
</div>
</content>
</entry>
<entry>
<title>[fuzzer][Fuchsia] Forward fix for undefined StartRssThread (#155514)</title>
<updated>2025-08-26T23:08:54+00:00</updated>
<author>
<name>PiJoules</name>
<email>6019989+PiJoules@users.noreply.github.com</email>
</author>
<published>2025-08-26T23:08:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=316004764fe39fd1a273ebec050c749e2176b098'/>
<id>316004764fe39fd1a273ebec050c749e2176b098</id>
<content type='text'>
The declaration was static when it shouldn't be since it can be defined
in FuzzerUtilFuchsia.cpp</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The declaration was static when it shouldn't be since it can be defined
in FuzzerUtilFuchsia.cpp</pre>
</div>
</content>
</entry>
<entry>
<title>Reapply "[fuzzer][Fuchsia] Prevent deadlock from suspending threads" … (#155271)</title>
<updated>2025-08-25T16:50:42+00:00</updated>
<author>
<name>PiJoules</name>
<email>6019989+PiJoules@users.noreply.github.com</email>
</author>
<published>2025-08-25T16:50:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=7153392a1089107d419ae9234486263b748b9e88'/>
<id>7153392a1089107d419ae9234486263b748b9e88</id>
<content type='text'>
…(#155042)

This reverts commit 781a4db6b50bb660cb293d3e7e29957aeb4b02ac.

Relanded with the fix declaring StartRssThread.</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
…(#155042)

This reverts commit 781a4db6b50bb660cb293d3e7e29957aeb4b02ac.

Relanded with the fix declaring StartRssThread.</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "[fuzzer][Fuchsia] Prevent deadlock from suspending threads" (#155042)</title>
<updated>2025-08-22T22:54:46+00:00</updated>
<author>
<name>gulfemsavrun</name>
<email>gulfem@google.com</email>
</author>
<published>2025-08-22T22:54:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=781a4db6b50bb660cb293d3e7e29957aeb4b02ac'/>
<id>781a4db6b50bb660cb293d3e7e29957aeb4b02ac</id>
<content type='text'>
Reverts llvm/llvm-project#154854 because it broke Clang toolchain
builders for Fuchsia:

https://luci-milo.appspot.com/ui/p/fuchsia/builders/toolchain.ci/clang-linux-x64/b8705803649235662417/overview</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Reverts llvm/llvm-project#154854 because it broke Clang toolchain
builders for Fuchsia:

https://luci-milo.appspot.com/ui/p/fuchsia/builders/toolchain.ci/clang-linux-x64/b8705803649235662417/overview</pre>
</div>
</content>
</entry>
<entry>
<title>[fuzzer][Fuchsia] Prevent deadlock from suspending threads (#154854)</title>
<updated>2025-08-22T20:22:32+00:00</updated>
<author>
<name>PiJoules</name>
<email>6019989+PiJoules@users.noreply.github.com</email>
</author>
<published>2025-08-22T20:22:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=b9987503d2ed2768ff8b64446049383412c7806b'/>
<id>b9987503d2ed2768ff8b64446049383412c7806b</id>
<content type='text'>
Every once in a couple hundred runs of a downstream fuzzer test, we see
a fuzzing test freeze while waiting for a thread to be suspended. The
main thread is frozen because it's waiting to suspend either the alarm
or rss thread which is stuck waiting for an exception they sent out to
be handled. Specifically, both threads send out a synthetic
`ZX_EXCP_THREAD_STARTING` exception to be handled by the crash handling
thread which sets up an exception channel on the whole process with
`ZX_EXCEPTION_CHANNEL_DEBUGGER`. This is the only channel type that
listens to thread stop/start exceptions. Normally, the exception would
be ignored and the alarm or rss thread would continue normally once the
crash handling thread closes the read exception. However, the memory
snapshot machinery can suspend this thread while its in the process of
waiting for or handling a `ZX_EXCP_THREAD_STARTING` sent by either the
rss or alarm thread. If this is suspended first, then we attempt to
suspend either the alarm or rss thread while they're still waiting for
the crash handling thread to handle its exception, we will freeze
waiting for those threads to give the suspend signal, which they won't
because they're blocked on waiting for the exception handler. This is
the deadlock.

Until there's a way for the memory snapshot machinery to suspend the
thread while it's stuck on an exception, then we can work around this in
the meantime by just ensuring the alarm and rss threads start normally
via signals on the initial startup path. I can assert locally the
freezing doesn't occur after 6000 runs where prior we would see it every
couple hundred runs. Note this type of issue can arise again if the
fuzzing test launches any dangling threads that happen to not start yet.
One of the recommendations for writing a fuzz test is that the test may
launch threads, but they should be joined by the end of the test
(https://llvm.org/docs/LibFuzzer.html#fuzz-target), so hopefully we
won't see this type of bug rise frequently from fuzz tests. More
broadly, this can also arise if any process launches its own debugger
via `ZX_EXCEPTION_CHANNEL_DEBUGGER`, but I would think in practice this
isn't very likely to happen.

More context in https://fxbug.dev/436923423.

---------

Co-authored-by: Petr Hosek &lt;phosek@google.com&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Every once in a couple hundred runs of a downstream fuzzer test, we see
a fuzzing test freeze while waiting for a thread to be suspended. The
main thread is frozen because it's waiting to suspend either the alarm
or rss thread which is stuck waiting for an exception they sent out to
be handled. Specifically, both threads send out a synthetic
`ZX_EXCP_THREAD_STARTING` exception to be handled by the crash handling
thread which sets up an exception channel on the whole process with
`ZX_EXCEPTION_CHANNEL_DEBUGGER`. This is the only channel type that
listens to thread stop/start exceptions. Normally, the exception would
be ignored and the alarm or rss thread would continue normally once the
crash handling thread closes the read exception. However, the memory
snapshot machinery can suspend this thread while its in the process of
waiting for or handling a `ZX_EXCP_THREAD_STARTING` sent by either the
rss or alarm thread. If this is suspended first, then we attempt to
suspend either the alarm or rss thread while they're still waiting for
the crash handling thread to handle its exception, we will freeze
waiting for those threads to give the suspend signal, which they won't
because they're blocked on waiting for the exception handler. This is
the deadlock.

Until there's a way for the memory snapshot machinery to suspend the
thread while it's stuck on an exception, then we can work around this in
the meantime by just ensuring the alarm and rss threads start normally
via signals on the initial startup path. I can assert locally the
freezing doesn't occur after 6000 runs where prior we would see it every
couple hundred runs. Note this type of issue can arise again if the
fuzzing test launches any dangling threads that happen to not start yet.
One of the recommendations for writing a fuzz test is that the test may
launch threads, but they should be joined by the end of the test
(https://llvm.org/docs/LibFuzzer.html#fuzz-target), so hopefully we
won't see this type of bug rise frequently from fuzz tests. More
broadly, this can also arise if any process launches its own debugger
via `ZX_EXCEPTION_CHANNEL_DEBUGGER`, but I would think in practice this
isn't very likely to happen.

More context in https://fxbug.dev/436923423.

---------

Co-authored-by: Petr Hosek &lt;phosek@google.com&gt;</pre>
</div>
</content>
</entry>
<entry>
<title>[compiler-rt][libFuzzer] Add support for capturing SIGTRAP exits. (#149120)</title>
<updated>2025-07-28T14:46:48+00:00</updated>
<author>
<name>Dan Blackwell</name>
<email>dan_blackwell@apple.com</email>
</author>
<published>2025-07-28T14:46:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=33cc58f46f0c163d4bea2c7212b3830b3adf99b3'/>
<id>33cc58f46f0c163d4bea2c7212b3830b3adf99b3</id>
<content type='text'>
Swift's FatalError raises a SIGTRAP, which currently causes the fuzzer
to exit without writing out the crashing input.

rdar://142975522</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Swift's FatalError raises a SIGTRAP, which currently causes the fuzzer
to exit without writing out the crashing input.

rdar://142975522</pre>
</div>
</content>
</entry>
<entry>
<title>[compiler-rt] Include missing headers for libFuzzer (#146828)</title>
<updated>2025-07-10T08:56:08+00:00</updated>
<author>
<name>Takuto Ikuta</name>
<email>tikuta@google.com</email>
</author>
<published>2025-07-10T08:56:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.belthelziquor.com/llvm-project.git/commit/?id=f7cdff7bddcb168094b569b15d2bfaef0526c244'/>
<id>f7cdff7bddcb168094b569b15d2bfaef0526c244</id>
<content type='text'>
This is to fix modules build errors in chromium like
*
https://ci.chromium.org/ui/p/chromium/builders/try/linux-libfuzzer-asan-rel/2292144/overview
*
https://ci.chromium.org/ui/p/chromium/builders/try/linux-libfuzzer-asan-rel/2292444/overview

---------

Co-authored-by: Petr Hosek &lt;phosek@google.com&gt;</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is to fix modules build errors in chromium like
*
https://ci.chromium.org/ui/p/chromium/builders/try/linux-libfuzzer-asan-rel/2292144/overview
*
https://ci.chromium.org/ui/p/chromium/builders/try/linux-libfuzzer-asan-rel/2292444/overview

---------

Co-authored-by: Petr Hosek &lt;phosek@google.com&gt;</pre>
</div>
</content>
</entry>
</feed>
