ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-16 11:58:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix and clean UID/GID modification

Browse Source
This commit is contained in:
GRAUX Pierre
2025-06-09 16:33:16 +02:00
parent c8d1b66af3
commit 00e5449ad6
3 changed files with 31 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src/afl-forkserver.c
View File

@ -235,6 +235,24 @@ static void fsrv_exec_child(afl_forkserver_t *fsrv, char **argv) {
}
if (fsrv->chown_needed && fsrv->out_file != NULL) {
if (access(fsrv->out_file, R_OK) == -1) {
if (errno == EACCES) {
FATAL(
"Access to the file to fuzz denied. Most likely the requested\n"
" UID and/or GID is denied search permission ('x') for one of "
"the directories\n in the path prefix of \"%s\".",
fsrv->out_file);
}
}
}
execv(fsrv->target_path, argv);
WARNF("Execv failed in forkserver: %s.", strerror(errno));

2
src/afl-fuzz-init.c
View File

@ -2273,8 +2273,6 @@ void setup_dirs_fds(afl_state_t *afl) {
}
printf("out_dir = %s\n", afl->out_dir);
if (mkdir(afl->out_dir, afl->dir_perm)) {
if (errno != EEXIST) { PFATAL("Unable to create '%s'", afl->out_dir); }

15
utils/afl_network_proxy/afl-network-server.c
View File

@ -179,7 +179,17 @@ static void set_up_environment(afl_forkserver_t *fsrv) {
unlink(out_file);
fsrv->out_fd = open(out_file, O_RDWR | O_CREAT | O_EXCL, 0600);
fsrv->out_fd = open(out_file, O_RDWR | O_CREAT | O_EXCL, fsrv->perm);
if (fsrv->chown_needed) {
if (fchown(fsrv->out_fd, -1, fsrv->gid) == -1) {
PFATAL("fchown() failed");
}
}
if (fsrv->out_fd < 0) { PFATAL("Unable to create '%s'", out_file); }
@ -526,7 +536,8 @@ int main(int argc, char **argv_orig, char **envp) {
check_environment_vars(envp);
sharedmem_t shm = {0};
fsrv->trace_bits = afl_shm_init(&shm, map_size, 0);
fsrv->trace_bits = afl_shm_init(&shm, map_size, 0, fsrv->perm,
fsrv->chown_needed ? fsrv->gid : -1);
in_data = afl_realloc((void **)&in_data, 65536);
if (unlikely(!in_data)) { PFATAL("Alloc"); }