The following values are replaced with the specific values at runtime.
{input}: Path to the input file being processed in the current event{crashes}: Path to write crashes{input_corpus}: Path to the input corpus directory{generated_inputs}: Path to the generated inputs directory{target_exe}: Path to the target binary{target_options}: Target options (recursively expanded){output_dir}: Path to the output directory as defined by the task{input_file_name}: the input file name with the extension (available whereverinputis available){input_file_name_no_ext}: the input file name without the extension (available whereverinputis available){runtime_dir}: Path to the runtime directory for the task{tools_dir}: Path to the task specifictoolsdirectory
Assume the following:
supervisor_optionsis: "a", "{target_options}", "b"target_optionsis: "c", "{target_exe}"target_exeis: "d"
The resulting supervisor_options is: "a", "c", "d", "b"
These are currently used in the following tasks:
- libfuzzer_fuzz:
target_exe,target_options,input_corpus,crashes - libfuzzer_crash_report:
target_exe,target_options,input - libfuzzer_merge:
target_exe,target_options,input_corpus - libfuzzer_coverage: None
- generic_analysis:
input,target_exe,target_options,analyzer_exe,anayzer_options,output_dir,tools_dir - generic_generator:
generated_inputs,input_corpus,tools_dir,generator_exe,generator_options,target_exe,target_options,input - generic_supervisor:
crashes,runtime_dir,target_exe,target_options,input_corpus,input,supervisor_exe,supervisor_options,tools_dir - generic_merge:
input,input_corpus,output_dir,target_exe,target_options,supervisor_exe,supervisor_options,tools_dir