1 Coverage support for Xen

Coverage support allows you to get coverage information from Xen execution. You can see how many times a line is executed.

Some compilers have specific options that enable the collection of this information. Every basic block in the code will be instrumented by the compiler to compute these statistics. It should not be used in production as it slows down your hypervisor.

2 GCOV (GCC coverage)

2.1 Enable coverage

Test coverage support can be turned on compiling Xen with the CONFIG_COVERAGE option set to y.

Change your .config or run make -C xen menuconfig.

2.2 Extract coverage data

To extract data you use a simple utility called xencov. It allows you to do 2 operations:

Another utility (xencov_split) is used to split extracted data file into files needed by userspace tools.

2.3 Split coverage data

Once you extracted data from Xen, it is time to create files which the coverage tools can understand. To do it you need to run xencov_split utility.

The utility just takes an input file and splits the blob into gcc .gcda files in the same directory that you execute the script. As file names are generated relative to the current directory, it could be a good idea to run the script from / on your build machine.

Code for splitting the blob is put in another utility for some reason: * It is simpler to maintain a high level script than a C program; * You don't need to execute on the Xen host so you just need to copy the file to your development box (you usually need development files anyway).

2.4 Possible use

This section is just an example on how to use these tools!

This example assumes you compiled Xen from ~/xen-unstable and installed into the host. Consider that if you even recompile Xen you are not able to use blob extracted from xencov!

3 LLVM coverage

3.1 Enable coverage

Coverage can be enabled using a Kconfig option, from the top-level directory use the following command to display the Kconfig menu:

make -C xen menuconfig clang=y

The code coverage option can be found inside of the "Debugging Options" section. After enabling it just compile Xen as you would normally do:

make xen clang=y

3.2 Extract coverage data

LLVM coverage can be extracted from the hypervisor using the xencov tool. The following actions are available:

3.3 Possible use

This section is just an example on how to use these tools!

This example assumes you compiled Xen and copied the xen-syms file from xen/xen-syms into your current directory.