Processor State Coverage
ConceptProcessor State Coverage is a processor-fuzzing concept centered on steering tests toward broader and deeper architectural state exploration. In the provided evidence, MorFuzz supports this goal through processor-state-level mutation primitives in stimulus templates, runtime instruction morphing guided by runtime information, and synchronizable co-simulation that keeps the device under test and simulator aligned while checking architectural state after each instruction.
WIKI
Overview
Processor State Coverage describes the coverage-oriented goal of exercising diverse processor architectural states during processor fuzzing. In the MorFuzz evidence, this goal is supported by stimulus templates that include processor state level runtime mutation primitives, along with instruction-field and program-semantic mutation primitives, to explore the processor input space more comprehensively. [Processor-state mutation primitives]
MorFuzz’s architecture ties state exploration to runtime feedback: it dynamically mutates instructions based on runtime information, executes the resulting instruction streams on both a processor under test and a simulator, and compares their architectural states after each instruction. [Runtime feedback and state comparison]
NEIGHBORHOOD
No graph connections found for this entity yet. It may appear in future ingestion runs.
explore full graph →