Add -simplifycfg-branch-fold-threshold=0 flag to elminate LLVMs selec…

…t instructions (cmov) optimisations. This gives extra coverage checkpoint in && chained conditionals
rust-fuzz · Aug 2, 2024 · 8a216ad · 8a216ad
1 parent aef5d88
commit 8a216ad
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/project.rs b/src/project.rs
@@ -168,7 +168,8 @@ impl FuzzProject {
         let mut rustflags: String = "-Cpasses=sancov-module \
                                      -Cllvm-args=-sanitizer-coverage-level=4 \
                                      -Cllvm-args=-sanitizer-coverage-inline-8bit-counters \
-                                     -Cllvm-args=-sanitizer-coverage-pc-table"
+                                     -Cllvm-args=-sanitizer-coverage-pc-table \
+                                     -Cllvm-args=-simplifycfg-branch-fold-threshold=0"
             .to_owned();
 
         if !build.no_trace_compares {