add helper scripts

Author: vanhauser-thc

README.md

@@ -1,5 +1,6 @@
 # afl-cov - AFL Fuzzing Code Coverage
 
+- [Preface](#preface)
 - [Introduction](#introduction)
 - [Prerequisites](#prerequisites)
 - [Workflow](#workflow)
@@ -10,6 +11,20 @@
 - [License](#license)
 - [Contact](#contact)
 
+## Preface
+
+This is a modified afl-cov fork because the original author's account is
+inactive :-(
+
+It has three changes:
+ * afl-cov now accepts "@@" like AFL++ in the command line
+ * afl-cov.sh makes using afl-cov easier (just needs two parameters)
+ * afl-cov-build.sh makes builing a target for coverage easier
+
+Enjoy!
+
+Marc "vanHauser" Heuse 
+
 ## Introduction
 `afl-cov` uses test case files produced by the
 [AFL fuzzer](http://lcamtuf.coredump.cx/afl/) `afl-fuzz` to generate gcov code

afl-cov-build.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+
+test -z "$1" -o "$1" = "-h" && {
+  echo "Syntax: $0 <command> [options]"
+  echo Sets build options for coverage instrumentation with gcov/lcov.
+  echo Example: "$0 ./configure --disable-shared"
+}
+
+test -z "$CC" && export CC=gcc
+test -z "$CXX" && export CXX=g++
+export CFLAGS="-fprofile-arcs -ftest-coverage"
+export CXXFLAGS="$CFLAGS"
+export LDFLAGS="-lgcov --coverage"
+
+$*

afl-cov.sh

@@ -0,0 +1,20 @@
+#!/bin/sh
+#
+# easy wrapper script for afl-cov
+#
+test "$1" = "-h" -o -z "$1" && { 
+  echo Syntax: $0 out-dir \"exec cmd --foo @@\"
+  echo Generates the coverage information for an AFL run.
+  echo Must be run from the top directory of the coverage build.
+  echo Example: $0 ../target/out \"tools/target @@\"
+  exit 1
+}
+test -d "$1" || { echo Error: not a directory: $1 ; exit 1 ; } 
+test -e "$1"/queue || { echo Error: not an afl-fuzz -o out directory ; exit 1 ; }
+DST=`realpath "$1"`
+afl-cov -v -d "$DST" --cover-corpus --coverage-cmd "$2" --code-dir . --overwrite
+test -e "$1"/fuzzer_stats && {
+  echo "runtime           :" $(expr `grep last_update "$DST"/fuzzer_stats|awk '{print$3}'` - `grep start_time "$DST"/fuzzer_stats|awk '{print$3}'`) seconds
+  egrep 'execs_done|paths_total|^unique_|stability' "$DST"/fuzzer_stats
+}
+echo open "file://$DST/cov/web/index.html"