ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-14 19:08:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

minor fix to qemu_persistent_hook example

Browse Source
This commit is contained in:
van Hauser
2020-03-17 16:10:34 +01:00
parent e194acdd79
commit dae249dc71
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
examples/qemu_persistent_hook/read_into_rdi.c
View File

@ -38,12 +38,13 @@ enum {
void afl_persistent_hook(uint64_t *regs, uint64_t guest_base) { void afl_persistent_hook(uint64_t *regs, uint64_t guest_base) {
// In this example the register RDI is pointing to the memory location // In this example the register RDI is pointing to the memory location
// of the target buffer, and the length of the input is in RAX. // of the target buffer, and the length of the input is in RSI.
// This can be seen with a debugger, e.g. gdb (and "disass main")
printf("reading into %p\n", regs[R_EDI]); printf("reading into %p\n", regs[R_EDI]);
size_t r = read(0, g2h(regs[R_EDI]), 1024); size_t r = read(0, g2h(regs[R_EDI]), 1024);
regs[R_EAX] = r; regs[R_ESI] = r;
printf("readed %ld bytes\n", r); printf("read %ld bytes\n", r);
} }

2
examples/qemu_persistent_hook/test.c
View File

@ -1,6 +1,6 @@
#include <stdio.h> #include <stdio.h>
int target_func(char *buf, int size) { int target_func(unsigned char *buf, int size) {
printf("buffer:%p, size:%p\n", buf, size); printf("buffer:%p, size:%p\n", buf, size);
switch (buf[0]) { switch (buf[0]) {