fix cmpcov doc for qemu

This commit is contained in:
vanhauser-thc 2021-05-26 22:51:37 +02:00
parent 64d9b7dd21
commit 2af9a634d6

View File

@ -110,22 +110,23 @@ takes priority over any included ranges or AFL_INST_LIBS.
CompareCoverage is a sub-instrumentation with effects similar to laf-intel. CompareCoverage is a sub-instrumentation with effects similar to laf-intel.
The environment variable that enables QEMU CompareCoverage is AFL_COMPCOV_LEVEL. You have to set `AFL_PRELOAD=/path/to/libcompcov.so` together with
There is also ./libcompcov/ which implements CompareCoverage for *cmp functions setting the AFL_COMPCOV_LEVEL you want to enable it.
(splitting memcmp, strncmp, etc. to make these conditions easier solvable by
afl-fuzz).
AFL_COMPCOV_LEVEL=1 is to instrument comparisons with only immediate AFL_COMPCOV_LEVEL=1 is to instrument comparisons with only immediate
values / read-only memory. AFL_COMPCOV_LEVEL=2 instruments all values / read-only memory.
comparison instructions and memory comparison functions when libcompcov
is preloaded. AFL_COMPCOV_LEVEL=2 instruments all comparison instructions and memory
AFL_COMPCOV_LEVEL=3 has the same effects of AFL_COMPCOV_LEVEL=2 but enables also comparison functions when libcompcov is preloaded.
the instrumentation of the floating-point comparisons on x86 and x86_64 (experimental).
AFL_COMPCOV_LEVEL=3 has the same effects of AFL_COMPCOV_LEVEL=2 but enables
also the instrumentation of the floating-point comparisons on x86 and x86_64
(experimental).
Integer comparison instructions are currently instrumented only Integer comparison instructions are currently instrumented only
on the x86, x86_64, arm and aarch64 targets. on the x86, x86_64, arm and aarch64 targets.
Highly recommended. Recommended, but not as good as CMPLOG mode (see below).
## 8) CMPLOG mode ## 8) CMPLOG mode