mirror of
https://github.com/AFLplusplus/AFLplusplus.git
synced 2025-06-08 08:11:34 +00:00
Merge pull request #688 from murx-/dev
Update documentation to reflect new default power schedule
This commit is contained in:
commit
c42875ddea
@ -591,7 +591,7 @@ For every secondary fuzzer there should be a variation, e.g.:
|
|||||||
All other secondaries should be used like this:
|
All other secondaries should be used like this:
|
||||||
* A third to a half with the MOpt mutator enabled: `-L 0`
|
* A third to a half with the MOpt mutator enabled: `-L 0`
|
||||||
* run with a different power schedule, available are:
|
* run with a different power schedule, available are:
|
||||||
`explore (default), fast, coe, lin, quad, exploit, mmopt, rare, seek`
|
`fast (default), explore, coe, lin, quad, exploit, mmopt, rare, seek`
|
||||||
which you can set with e.g. `-p seek`
|
which you can set with e.g. `-p seek`
|
||||||
|
|
||||||
You can also use different fuzzers.
|
You can also use different fuzzers.
|
||||||
|
@ -13,8 +13,8 @@ We find that AFL's exploitation-based constant schedule assigns **too much energ
|
|||||||
|
|
||||||
| AFL flag | Power Schedule |
|
| AFL flag | Power Schedule |
|
||||||
| ------------- | -------------------------- |
|
| ------------- | -------------------------- |
|
||||||
| `-p explore` (default)|  |
|
| `-p explore` |  |
|
||||||
| `-p fast` | =\\min\\left(\\frac{\\alpha(i)}{\\beta}\\cdot\\frac{2^{s(i)}}{f(i)},M\\right)) |
|
| `-p fast` (default)| =\\min\\left(\\frac{\\alpha(i)}{\\beta}\\cdot\\frac{2^{s(i)}}{f(i)},M\\right)) |
|
||||||
| `-p coe` |  |
|
| `-p coe` |  |
|
||||||
| `-p quad` |  |
|
| `-p quad` |  |
|
||||||
| `-p lin` |  |
|
| `-p lin` |  |
|
||||||
|
@ -29,13 +29,18 @@ With that out of the way, let's talk about what's actually on the screen...
|
|||||||
|
|
||||||
### The status bar
|
### The status bar
|
||||||
|
|
||||||
|
```
|
||||||
|
american fuzzy lop ++3.01a (default) [fast] {0}
|
||||||
|
```
|
||||||
|
|
||||||
The top line shows you which mode afl-fuzz is running in
|
The top line shows you which mode afl-fuzz is running in
|
||||||
(normal: "american fuzy lop", crash exploration mode: "peruvian rabbit mode")
|
(normal: "american fuzy lop", crash exploration mode: "peruvian rabbit mode")
|
||||||
and the version of afl++.
|
and the version of afl++.
|
||||||
Next to the version is the banner, which, if not set with -T by hand, will
|
Next to the version is the banner, which, if not set with -T by hand, will
|
||||||
either show the binary name being fuzzed, or the -M/-S main/secondary name for
|
either show the binary name being fuzzed, or the -M/-S main/secondary name for
|
||||||
parallel fuzzing.
|
parallel fuzzing.
|
||||||
Finally, the last item is the power schedule mode being run (default: explore).
|
Second to last is the power schedule mode being run (default: fast).
|
||||||
|
Finally, the last item is the CPU id.
|
||||||
|
|
||||||
### Process timing
|
### Process timing
|
||||||
|
|
||||||
|
@ -103,8 +103,8 @@ static void usage(u8 *argv0, int more_help) {
|
|||||||
|
|
||||||
"Execution control settings:\n"
|
"Execution control settings:\n"
|
||||||
" -p schedule - power schedules compute a seed's performance score:\n"
|
" -p schedule - power schedules compute a seed's performance score:\n"
|
||||||
" <explore(default), rare, exploit, seek, mmopt, coe, "
|
" <fast(default), rare, exploit, seek, mmopt, coe, "
|
||||||
"fast,\n"
|
"explore,\n"
|
||||||
" lin, quad> -- see docs/power_schedules.md\n"
|
" lin, quad> -- see docs/power_schedules.md\n"
|
||||||
" -f file - location read by the fuzzed program (default: stdin "
|
" -f file - location read by the fuzzed program (default: stdin "
|
||||||
"or @@)\n"
|
"or @@)\n"
|
||||||
|
Loading…
x
Reference in New Issue
Block a user