ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-20 05:23:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2138 from meowmeowxw/ijon-set

Browse Source 
IJON SET
This commit is contained in:
van Hauser
2024-07-10 13:51:08 +02:00
committed by GitHub
parent d1a7b6988c 77bad3ad23
commit 43f462c91b
6 changed files with 24 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
frida_mode/frida.map
View File

@ -45,6 +45,7 @@
js_api_set_stdout; js_api_set_stdout;
js_api_set_traceable; js_api_set_traceable;
js_api_set_verbose; js_api_set_verbose;
js_api_ijon_set;
local: local:
*; *;

3
frida_mode/include/instrument.h
View File

@ -22,6 +22,7 @@ extern guint64 instrument_fixed_seed;
extern uint8_t *__afl_area_ptr; extern uint8_t *__afl_area_ptr;
extern uint32_t __afl_map_size; extern uint32_t __afl_map_size;
extern void __afl_coverage_interesting(uint8_t, uint32_t);
extern __thread guint64 *instrument_previous_pc_addr; extern __thread guint64 *instrument_previous_pc_addr;
@ -72,5 +73,7 @@ void instrument_cache(const cs_insn *instr, GumStalkerOutput *output);
void instrument_write_regs(GumCpuContext *cpu_context, gpointer user_data); void instrument_write_regs(GumCpuContext *cpu_context, gpointer user_data);
void instrument_regs_format(int fd, char *format, ...); void instrument_regs_format(int fd, char *format, ...);
void ijon_set(uint32_t edge);
#endif #endif

6
frida_mode/src/instrument/instrument.c
View File

@ -449,3 +449,9 @@ void instrument_regs_format(int fd, char *format, ...) {
} }
void ijon_set(uint32_t edge) {
__afl_coverage_interesting(1, edge);
}

7
frida_mode/src/js/api.js
View File

@ -326,6 +326,12 @@ class Afl {
static jsApiGetSymbol(name) { static jsApiGetSymbol(name) {
return Afl.module.getExportByName(name); return Afl.module.getExportByName(name);
} }
static IJON = class {
static set(addr, val) {
Afl.jsApiIjonSet((addr ^ val) & 0xffffffff);
}
}
} }
/** /**
* Field containing the `Module` object for `afl-frida-trace.so` (the FRIDA mode * Field containing the `Module` object for `afl-frida-trace.so` (the FRIDA mode
@ -377,3 +383,4 @@ Afl.jsApiSetVerbose = Afl.jsApiGetFunction("js_api_set_verbose", "void", []);
Afl.jsApiWrite = new NativeFunction( Afl.jsApiWrite = new NativeFunction(
/* tslint:disable-next-line:no-null-keyword */ /* tslint:disable-next-line:no-null-keyword */
Module.getExportByName(null, "write"), "int", ["int", "pointer", "int"]); Module.getExportByName(null, "write"), "int", ["int", "pointer", "int"]);
Afl.jsApiIjonSet = Afl.jsApiGetFunction("js_api_ijon_set", "void", ["uint32"]);

6
frida_mode/src/js/js_api.c
View File

@ -316,3 +316,9 @@ __attribute__((visibility("default"))) void js_api_set_verbose(void) {
} }
__attribute__((visibility("default"))) void js_api_ijon_set(uint32_t edge) {
ijon_set(edge);
}

2
instrumentation/afl-compiler-rt.o.c
View File

@ -2725,7 +2725,7 @@ void __afl_coverage_skip() {
// mark this area as especially interesting // mark this area as especially interesting
void __afl_coverage_interesting(u8 val, u32 id) { void __afl_coverage_interesting(u8 val, u32 id) {
__afl_area_ptr[id] = val; __afl_area_ptr[id % __afl_map_size] = val;
} }