How do I handle crashes during coverage generation?

The skill provides a specialized execution runtime pattern using fork() to isolate crashes, ensuring that a single bad input doesn't stop the entire reporting process.

Why is my fuzzer plateauing without finding new paths?

Often, 'magic value' checks or hard-to-reach conditionals block progress; coverage analysis helps identify these specific locations so you can add them to a dictionary.

What is coverage-guided fuzzing?

It is a fuzzing strategy that prioritizes inputs that discover new code paths, making the fuzzer significantly more efficient at exploring the logic of your codebase.

Is it possible to integrate this with my existing build system?

Yes, it includes patterns for CMake integration, allowing you to add coverage-instrumented targets alongside your standard binaries.

Can I use this coverage skill with Rust projects?

Yes, the skill includes specific instructions and scripts for using cargo-fuzz coverage with the Rust nightly toolchain and llvm-tools-preview.

Coverage Analysis for Fuzzing

Name: Coverage Analysis for Fuzzing
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Analyzes code execution during fuzzing to identify performance bottlenecks, magic value blockers, and areas for harness improvement.

The Coverage Analysis skill provides a comprehensive framework for monitoring how much of a codebase is actually exercised during automated fuzzing campaigns. By integrating with LLVM, GCC, and Rust toolchains, it enables developers to generate detailed visual reports that highlight unreached code paths and 'magic value' checks that prevent fuzzer progress. This skill is essential for establishing coverage baselines, debugging harness issues, and ensuring that security testing efforts are reaching the most critical and complex parts of your application.

主な機能

01Multi-language support for C, C++, and Rust coverage instrumentation

02Incremental and differential coverage analysis for tracking campaign progress

03Identification techniques for bypassing magic value conditional blockers

04Automated LLVM and GCC report generation in HTML and text formats

05Workflow patterns for isolating crashing inputs during coverage runs

060 GitHub stars

ユースケース

01Identifying specific code blocks that are unreachable due to hardcoded magic values

02Verifying that harness modifications successfully increased code reach within the system under test

03Establishing a baseline for new fuzzing campaigns to measure starting effectiveness

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks coverage-analysis

For use in Claude.ai and ChatGPT

Download Skill