I'm curious about how SharpFuzz measures coverage

[howl-2019]

I've been using your SharpFuzz and finding it quite useful. However, I have a question. It seems like SharpFuzz takes input generated by afl and reports that input if an exception occurs. I'm curious about how afl measures coverage for that input. It seems like afl and SharpFuzz operate as separate processes. If I've misunderstood something, please point it out, and I would appreciate it if you could explain the coverage measurement method used by SharpFuzz.

Thank you.

[Mic92]

afl-showmap seems to produce some result:

$ afl-showmap -C -i ./findings/default -o /dev/null -- $(cat findings/default/cmdline)
[*] Reading from directory './findings/default/queue'...
[*] Scanning './findings/default/queue'...
[+] Captured 660 tuples (map size 8388608, highest value 255, total values 1009849) in '/dev/null'.
[+] A coverage of 660 edges were achieved out of 8388608 existing (0.01%) with 544 input files.

I wonder if there is some way to map this back to source code?