Feature request: add a flag to save inputs that caused timeouts about honggfuzz HOT 8 CLOSED

I've added --tmout_sigvtalrm, please give it a try

from honggfuzz.

Thanks for the fast patch, it seems to be working (on Linux at least).
I don't know if it's intentional but sometimes the Crashes counter shows a smaller number than the Timeouts counter.

I have tried it with the following simple code:

#include <stdint.h>
#include <unistd.h>

int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
{
    if (size > 0 && data[0] == 'H')
        if (size > 1 && data[1] == 'I')
            if (size > 2 && data[2] == '!')
                sleep(20);
    return 0;
}

from honggfuzz.

I do not know if this use case is happening often enough, but would you consider giving this option a one-letter code (like -T)?

from honggfuzz.

Sure, gitpulls wellcome :)

from honggfuzz.

I've added protection against counting timeouts twice (or more times). Feel free to test the newest pull

from honggfuzz.

I have submitted a bugfix #119 and the short flag option #120.
Thanks!

from honggfuzz.

Btw I have used this new timeout option to find out what causes 100% CPU usage in the ASN1 decoder of Crypto++. That has just been publicly disclosed at weidai11/cryptopp#346 (it does not have a CVE number yet)

from honggfuzz.

Nice :)

from honggfuzz.