ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-15 03:18:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix asserts

Browse Source
This commit is contained in:
van Hauser
2020-12-08 11:30:05 +01:00
parent 46156957bd
commit da6cddab90
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/afl-fuzz-bitmap.c
View File

@ -457,8 +457,8 @@ u8 *describe_op(afl_state_t *afl, u8 new_bits, size_t max_description_len) {
ret[len_current++] = ',';
ret[len_current] = '\0';
size_t size_left = real_max_len - len_current - strlen(",+cov") - 2;
assert(size_left > 0);
ssize_t size_left = real_max_len - len_current - strlen(",+cov") - 2;
if (unlikely(size_left <= 0)) FATAL("filename got too long");
const char *custom_description =
afl->current_custom_fuzz->afl_custom_describe(
@ -505,7 +505,8 @@ u8 *describe_op(afl_state_t *afl, u8 new_bits, size_t max_description_len) {
if (new_bits == 2) { strcat(ret, ",+cov"); }
assert(strlen(ret) <= max_description_len);
if (unlikely(strlen(ret) >= max_description_len))
FATAL("describe string is too long");
return ret;

2
utils/aflpp_driver/aflpp_qemu_driver.c
View File

@ -6,7 +6,7 @@
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size);
__attribute__((weak)) int LLVMFuzzerInitialize(int *argc, char ***argv);
#define kMaxAflInputSize (1 * 1024 * 1024);
#define kMaxAflInputSize (1 * 1024 * 1024)
static uint8_t AflInputBuf[kMaxAflInputSize];
void __attribute__((noinline)) afl_qemu_driver_stdin_input(void) {