ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-18 20:48:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

larger map, stats reload fix, code format

Browse Source
This commit is contained in:
vanhauser-thc
2021-02-07 05:33:02 +01:00
parent 01327ad301
commit 209c5ba465
7 changed files with 52 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/Changelog.md
View File

@ -26,6 +26,8 @@ sending a mail to <afl-users+subscribe@googlegroups.com>.
`-i` or resumes (as these have most likely already been done) `-i` or resumes (as these have most likely already been done)
- fix crash for very, very fast targets+systems (thanks to mhlakhani - fix crash for very, very fast targets+systems (thanks to mhlakhani
for reporting) for reporting)
- on restarts (-i)/autoresume (AFL_AUTORESUME) the stats are now
reloaded and used, thanks to Vimal Joseph for this PR!
- if determinstic mode is active (-D, or -M without -d) then we sync - if determinstic mode is active (-D, or -M without -d) then we sync
after every queue entry as this can take very long time otherwise after every queue entry as this can take very long time otherwise
- better detection if a target needs a large shared map - better detection if a target needs a large shared map

2
instrumentation/afl-compiler-rt.o.c
View File

@ -70,7 +70,7 @@
run. It will end up as .comm, so it shouldn't be too wasteful. */ run. It will end up as .comm, so it shouldn't be too wasteful. */
#if MAP_SIZE <= 65536 #if MAP_SIZE <= 65536
#define MAP_INITIAL_SIZE 1048576 #define MAP_INITIAL_SIZE 2097152
#else #else
#define MAP_INITIAL_SIZE MAP_SIZE #define MAP_INITIAL_SIZE MAP_SIZE
#endif #endif

3
instrumentation/afl-llvm-lto-instrumentation.so.cc
View File

@ -69,7 +69,8 @@ class AFLLTOPass : public ModulePass {
if (getenv("AFL_DEBUG")) debug = 1; if (getenv("AFL_DEBUG")) debug = 1;
if ((ptr = getenv("AFL_LLVM_LTO_STARTID")) != NULL) if ((ptr = getenv("AFL_LLVM_LTO_STARTID")) != NULL)
if ((afl_global_id = (uint32_t)atoi(ptr)) < 0 || afl_global_id >= MAP_SIZE) if ((afl_global_id = (uint32_t)atoi(ptr)) < 0 ||
afl_global_id >= MAP_SIZE)
FATAL("AFL_LLVM_LTO_STARTID value of \"%s\" is not between 0 and %u\n", FATAL("AFL_LLVM_LTO_STARTID value of \"%s\" is not between 0 and %u\n",
ptr, MAP_SIZE - 1); ptr, MAP_SIZE - 1);

5
qemu_mode/libqasan/dlmalloc.c
View File

@ -3907,6 +3907,7 @@ static void internal_malloc_stats(mstate m) {
clear_smallmap(M, I); \ clear_smallmap(M, I); \
\ \
} else if (RTCHECK(B == smallbin_at(M, I) || \ } else if (RTCHECK(B == smallbin_at(M, I) || \
\
(ok_address(M, B) && B->fd == P))) { \ (ok_address(M, B) && B->fd == P))) { \
\ \
F->bk = B; \ F->bk = B; \
@ -4117,6 +4118,7 @@ static void internal_malloc_stats(mstate m) {
XP->child[1] = R; \ XP->child[1] = R; \
\ \
} else \ } else \
\
CORRUPTION_ERROR_ACTION(M); \ CORRUPTION_ERROR_ACTION(M); \
if (R != 0) { \ if (R != 0) { \
\ \
@ -4132,6 +4134,7 @@ static void internal_malloc_stats(mstate m) {
C0->parent = R; \ C0->parent = R; \
\ \
} else \ } else \
\
CORRUPTION_ERROR_ACTION(M); \ CORRUPTION_ERROR_ACTION(M); \
\ \
} \ } \
@ -4143,11 +4146,13 @@ static void internal_malloc_stats(mstate m) {
C1->parent = R; \ C1->parent = R; \
\ \
} else \ } else \
\
CORRUPTION_ERROR_ACTION(M); \ CORRUPTION_ERROR_ACTION(M); \
\ \
} \ } \
\ \
} else \ } else \
\
CORRUPTION_ERROR_ACTION(M); \ CORRUPTION_ERROR_ACTION(M); \
\ \
} \ } \

3
src/afl-fuzz-bitmap.c
View File

@ -325,7 +325,8 @@ u8 *describe_op(afl_state_t *afl, u8 new_bits, size_t max_description_len) {
} }
sprintf(ret + strlen(ret), ",time:%llu", get_cur_time() - afl->start_time); sprintf(ret + strlen(ret), ",time:%llu",
get_cur_time() + afl->prev_run_time - afl->start_time);
if (afl->current_custom_fuzz && if (afl->current_custom_fuzz &&
afl->current_custom_fuzz->afl_custom_describe) { afl->current_custom_fuzz->afl_custom_describe) {

43
src/afl-fuzz-statsd.c
View File

@ -1,3 +1,8 @@
/*
* This implements rpc.statsd support, see docs/rpc_statsd.md
*
*/
#include <stdio.h> #include <stdio.h>
#include <stdlib.h> #include <stdlib.h>
#include <sys/socket.h> #include <sys/socket.h>
@ -226,37 +231,39 @@ int statsd_format_metric(afl_state_t *afl, char *buff, size_t bufflen) {
*/ */
if (afl->statsd_metric_format_type == STATSD_TAGS_TYPE_SUFFIX) { if (afl->statsd_metric_format_type == STATSD_TAGS_TYPE_SUFFIX) {
snprintf(buff, bufflen, afl->statsd_metric_format, snprintf(
buff, bufflen, afl->statsd_metric_format,
afl->queue_cycle ? (afl->queue_cycle - 1) : 0, tags, afl->queue_cycle ? (afl->queue_cycle - 1) : 0, tags,
afl->cycles_wo_finds, tags, afl->fsrv.total_execs, tags, afl->cycles_wo_finds, tags, afl->fsrv.total_execs, tags,
afl->fsrv.total_execs / afl->fsrv.total_execs /
((double)(get_cur_time() - afl->start_time) / 1000), ((double)(get_cur_time() + afl->prev_run_time - afl->start_time) /
1000),
tags, afl->queued_paths, tags, afl->queued_favored, tags, tags, afl->queued_paths, tags, afl->queued_favored, tags,
afl->queued_discovered, tags, afl->queued_imported, tags, afl->queued_discovered, tags, afl->queued_imported, tags,
afl->max_depth, tags, afl->current_entry, tags, afl->max_depth, tags, afl->current_entry, tags, afl->pending_favored,
afl->pending_favored, tags, afl->pending_not_fuzzed, tags, tags, afl->pending_not_fuzzed, tags, afl->queued_variable, tags,
afl->queued_variable, tags, afl->unique_crashes, tags, afl->unique_crashes, tags, afl->unique_hangs, tags, afl->total_crashes,
afl->unique_hangs, tags, afl->total_crashes, tags, tags, afl->slowest_exec_ms, tags,
afl->slowest_exec_ms, tags, count_non_255_bytes(afl, afl->virgin_bits), tags, afl->var_byte_count,
count_non_255_bytes(afl, afl->virgin_bits), tags, tags, afl->expand_havoc, tags);
afl->var_byte_count, tags, afl->expand_havoc, tags);
} else if (afl->statsd_metric_format_type == STATSD_TAGS_TYPE_MID) { } else if (afl->statsd_metric_format_type == STATSD_TAGS_TYPE_MID) {
snprintf(buff, bufflen, afl->statsd_metric_format, tags, snprintf(
buff, bufflen, afl->statsd_metric_format, tags,
afl->queue_cycle ? (afl->queue_cycle - 1) : 0, tags, afl->queue_cycle ? (afl->queue_cycle - 1) : 0, tags,
afl->cycles_wo_finds, tags, afl->fsrv.total_execs, tags, afl->cycles_wo_finds, tags, afl->fsrv.total_execs, tags,
afl->fsrv.total_execs / afl->fsrv.total_execs /
((double)(get_cur_time() - afl->start_time) / 1000), ((double)(get_cur_time() + afl->prev_run_time - afl->start_time) /
1000),
tags, afl->queued_paths, tags, afl->queued_favored, tags, tags, afl->queued_paths, tags, afl->queued_favored, tags,
afl->queued_discovered, tags, afl->queued_imported, tags, afl->queued_discovered, tags, afl->queued_imported, tags,
afl->max_depth, tags, afl->current_entry, tags, afl->max_depth, tags, afl->current_entry, tags, afl->pending_favored,
afl->pending_favored, tags, afl->pending_not_fuzzed, tags, tags, afl->pending_not_fuzzed, tags, afl->queued_variable, tags,
afl->queued_variable, tags, afl->unique_crashes, tags, afl->unique_crashes, tags, afl->unique_hangs, tags, afl->total_crashes,
afl->unique_hangs, tags, afl->total_crashes, tags, tags, afl->slowest_exec_ms, tags,
afl->slowest_exec_ms, tags, count_non_255_bytes(afl, afl->virgin_bits), tags, afl->var_byte_count,
count_non_255_bytes(afl, afl->virgin_bits), tags, tags, afl->expand_havoc);
afl->var_byte_count, tags, afl->expand_havoc);
} }