todo update

This commit is contained in:
van Hauser 2020-02-07 19:41:48 +01:00
parent fd8fe4dd08
commit e360726730
2 changed files with 4 additions and 1 deletions

3
TODO
View File

@ -18,6 +18,9 @@ qemu_mode:
- instrim for QEMU mode via static analysis (with r2pipe? or angr?) - instrim for QEMU mode via static analysis (with r2pipe? or angr?)
Idea: The static analyzer outputs a map in which each edge that must be Idea: The static analyzer outputs a map in which each edge that must be
skipped is marked with 1. QEMU loads it at startup in the parent process. skipped is marked with 1. QEMU loads it at startup in the parent process.
- rename qemu specific envs to AFL_QEMU (espec. AFL_ENTRYPOINT)
- add AFL_QEMU_EXITPOINT (maybe multiple?)
- add/implement AFL_QEMU_INST_LIBLIST and AFL_QEMU_NOINST_PROGRAM
custom_mutators: custom_mutators:
- rip what Superion is doing into custom mutators for js, php, etc. - rip what Superion is doing into custom mutators for js, php, etc.

View File

@ -100,7 +100,7 @@ static void usage(u8* argv0) {
" -f file - location read by the fuzzed program (stdin)\n" " -f file - location read by the fuzzed program (stdin)\n"
" -t msec - timeout for each run (auto-scaled, 50-%d ms)\n" " -t msec - timeout for each run (auto-scaled, 50-%d ms)\n"
" -m megs - memory limit for child process (%d MB)\n" " -m megs - memory limit for child process (%d MB)\n"
" -c program - enable CmpLog specifying a binary compiled for it\n" " -c program - enable CmpLog by specifying a binary compiled for it\n"
" -Q - use binary-only instrumentation (QEMU mode)\n" " -Q - use binary-only instrumentation (QEMU mode)\n"
" -U - use unicorn-based instrumentation (Unicorn mode)\n" " -U - use unicorn-based instrumentation (Unicorn mode)\n"
" -W - use qemu-based instrumentation with Wine (Wine " " -W - use qemu-based instrumentation with Wine (Wine "