ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-13 02:28:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

implementation without testing

Browse Source
This commit is contained in:
vanhauser-thc
2021-03-06 15:48:49 +01:00
parent 84f0b4f187
commit 81442ba3f9
3 changed files with 78 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

68
src/afl-forkserver.c
View File

@ -364,6 +364,21 @@ void afl_fsrv_start(afl_forkserver_t *fsrv, char **argv,
if (!be_quiet) { ACTF("Spinning up the fork server..."); }
if (unlikely(fsrv->persistent_replay)) {
fsrv->persistent_replay_data =
(u8 **)ck_alloc(fsrv->persistent_replay * sizeof(size_t));
fsrv->persistent_replay_len =
(u32 **)ck_alloc(fsrv->persistent_replay * sizeof(u32));
if (!fsrv->persistent_replay_data || !fsrv->persistent_replay_len) {
FATAL("Unable to allocate memory for persistent replay.");
}
}
if (fsrv->use_fauxsrv) {
/* TODO: Come up with some nice way to initialize this all */
@ -998,6 +1013,29 @@ u32 afl_fsrv_get_mapsize(afl_forkserver_t *fsrv, char **argv,
void afl_fsrv_write_to_testcase(afl_forkserver_t *fsrv, u8 *buf, size_t len) {
if (unlikely(fsrv->persistent_replay)) {
*fsrv->persistent_replay_len[fsrv->persistent_replay_idx] = len;
fsrv->persistent_replay_data[fsrv->persistent_replay_idx] = afl_realloc(
(void **)&fsrv->persistent_replay_data[fsrv->persistent_replay_idx],
len);
if (unlikely(!fsrv->persistent_replay_data[fsrv->persistent_replay_idx])) {
FATAL("allocating replay memory failed.");
}
memcpy(fsrv->persistent_replay_data[fsrv->persistent_replay_idx], buf, len);
if (unlikely(++fsrv->persistent_replay_idx >= fsrv->persistent_replay)) {
fsrv->persistent_replay_idx = 0;
}
}
if (likely(fsrv->use_shmem_fuzz && fsrv->shmem_fuzz)) {
if (unlikely(len > MAX_FILE)) len = MAX_FILE;
@ -1208,6 +1246,36 @@ fsrv_run_result_t afl_fsrv_run_target(afl_forkserver_t *fsrv, u32 timeout,
(fsrv->uses_crash_exitcode &&
WEXITSTATUS(fsrv->child_status) == fsrv->crash_exitcode))) {
if (unlikely(fsrv->persistent_replay)) {
char fn[4096];
u32 i, writecnt = 0;
for (i = 0; i < fsrv->persistent_replay; ++i) {
u32 entry = (i + fsrv->persistent_replay_idx) % fsrv->persistent_replay;
u8 *data = fsrv->persistent_replay_data[entry];
u32 *len = fsrv->persistent_replay_len[entry];
if (likely(len && *len && data)) {
snprintf(fn, sizeof(fn), "%s/replay_%u_%u.bin",
fsrv->persistent_replay_dir, fsrv->persistent_replay_cnt,
writecnt++);
int fd = open(fn, O_WRONLY, 0644);
if (fd >= 0) {
ck_write(fd, data, *len, fn);
close(fd);
}
}
}
++fsrv->persistent_replay_cnt;
}
/* For a proper crash, set last_kill_signal to WTERMSIG, else set it to 0 */
fsrv->last_kill_signal =
WIFSIGNALED(fsrv->child_status) ? WTERMSIG(fsrv->child_status) : 0;