mirror of
https://github.com/AFLplusplus/AFLplusplus.git
synced 2025-06-12 01:58:17 +00:00
update
This commit is contained in:
@ -3,7 +3,14 @@
|
|||||||
#include "argv-fuzz-inl.h"
|
#include "argv-fuzz-inl.h"
|
||||||
|
|
||||||
int main(int argc, char **argv) {
|
int main(int argc, char **argv) {
|
||||||
|
// Initialize the argv array for use with the AFL (American Fuzzy Lop) tool
|
||||||
AFL_INIT_ARGV();
|
AFL_INIT_ARGV();
|
||||||
|
|
||||||
|
/* Check the number of command line arguments and
|
||||||
|
compare the values of the first two arguments to specific strings.
|
||||||
|
If the number of arguments is not correct or the values do not match,
|
||||||
|
an error message is printed. If the values do match, the program
|
||||||
|
calls the abort() function. */
|
||||||
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
|
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
|
||||||
if (strcmp(argv[2], "TEST2") == 0) {
|
if (strcmp(argv[2], "TEST2") == 0) {
|
||||||
abort();
|
abort();
|
||||||
|
@ -1,28 +1,49 @@
|
|||||||
|
/*
|
||||||
|
This file contains a simple fuzzer for testing command line argument parsing
|
||||||
|
using persistent mode.
|
||||||
|
*/
|
||||||
|
|
||||||
#include <stdio.h>
|
#include <stdio.h>
|
||||||
#include <string.h>
|
#include <string.h>
|
||||||
#include "argv-fuzz-inl.h"
|
#include "argv-fuzz-inl.h"
|
||||||
|
|
||||||
__AFL_FUZZ_INIT();
|
__AFL_FUZZ_INIT();
|
||||||
|
|
||||||
|
/* The main function is an entry point for a program.
|
||||||
|
The argc parameter is an integer that indicates the number of arguments
|
||||||
|
passed to the program. The argv parameter is an array of character pointers,
|
||||||
|
with each element pointing to a null-terminated string that represents
|
||||||
|
one of the arguments.
|
||||||
|
*/
|
||||||
int main(int argc, char **argv) {
|
int main(int argc, char **argv) {
|
||||||
#ifdef __AFL_HAVE_MANUAL_CONTROL
|
#ifdef __AFL_HAVE_MANUAL_CONTROL
|
||||||
__AFL_INIT();
|
__AFL_INIT();
|
||||||
#endif
|
#endif
|
||||||
unsigned char *buf = __AFL_FUZZ_TESTCASE_BUF;
|
unsigned char *buf = __AFL_FUZZ_TESTCASE_BUF;
|
||||||
|
|
||||||
|
/* __AFL_LOOP() limits the maximum number of iterations before exiting
|
||||||
|
the loop and allowing the program to terminate. It protects against
|
||||||
|
accidental memory leaks and similar issues. */
|
||||||
while (__AFL_LOOP(100000)) {
|
while (__AFL_LOOP(100000)) {
|
||||||
int len = __AFL_FUZZ_TESTCASE_LEN;
|
int len = __AFL_FUZZ_TESTCASE_LEN;
|
||||||
|
|
||||||
|
// Check that the length of the test case is at least 8 bytes
|
||||||
if (len < 8) continue;
|
if (len < 8) continue;
|
||||||
|
|
||||||
|
// Initialize the command line arguments using the testcase buffer
|
||||||
AFL_INIT_ARGV_PERSISTENT(buf);
|
AFL_INIT_ARGV_PERSISTENT(buf);
|
||||||
|
|
||||||
|
/* Check if the first argument is "XYZ" and the second argument is "TEST2"
|
||||||
|
If so, call the "abort" function to terminate the program.
|
||||||
|
Otherwise, print an error message. */
|
||||||
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
|
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
|
||||||
if (strcmp(argv[2], "TEST2") == 0) { abort(); }
|
if (strcmp(argv[2], "TEST2") == 0) { abort(); }
|
||||||
} else {
|
} else {
|
||||||
printf("Bad number of arguments!\n");
|
printf("Bad number of arguments!\n");
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
/* Exiting the loop allows the program to terminate normally. AFL will restart
|
||||||
|
the process with a clean slate for allocated memory, file descriptors, etc.
|
||||||
|
*/
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
Reference in New Issue
Block a user