ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-18 12:48:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

silly rand_below_datalen fix

Browse Source
This commit is contained in:
van Hauser
2020-08-05 09:21:39 +02:00
parent f6c89ec3a9
commit 585ec04503
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
include/afl-fuzz.h
View File

@ -986,6 +986,8 @@ uint64_t rand_next(afl_state_t *afl);
static inline u32 rand_below(afl_state_t *afl, u32 limit) { static inline u32 rand_below(afl_state_t *afl, u32 limit) {
if (limit <= 1) return 0;
/* The boundary not being necessarily a power of 2, /* The boundary not being necessarily a power of 2,
we need to ensure the result uniformity. */ we need to ensure the result uniformity. */
if (unlikely(!afl->rand_cnt--) && likely(!afl->fixed_seed)) { if (unlikely(!afl->rand_cnt--) && likely(!afl->fixed_seed)) {
@ -1006,14 +1008,16 @@ static inline u32 rand_below(afl_state_t *afl, u32 limit) {
expand havoc mode */ expand havoc mode */
static inline u32 rand_below_datalen(afl_state_t *afl, u32 limit) { static inline u32 rand_below_datalen(afl_state_t *afl, u32 limit) {
if (limit <= 1) return 0;
switch (rand_below(afl, 3)) { switch (rand_below(afl, 3)) {
case 2: case 2:
return (rand_below(afl, limit) % rand_below(afl, limit)) % return (rand_below(afl, limit) % (1 + rand_below(afl, limit - 1))) %
rand_below(afl, limit); (1 + rand_below(afl, limit - 1));
break; break;
case 1: case 1:
return rand_below(afl, limit) % rand_below(afl, limit); return rand_below(afl, limit) % (1 + rand_below(afl, limit - 1));
break; break;
case 0: case 0:
return rand_below(afl, limit); return rand_below(afl, limit);