57 Commits

Author SHA1 Message Date
van Hauser
fff7f1c558
Dev (#1962)
* Pure Python (3.6) port of benchmark.sh as benchmark.py, no other changes

* Test standard and persistent modes separately

* Add support for multi-core benchmarking

* Save the results to a json file

* Allow config of all experiment params, average across runs

* Add start_time_of_run and total_execs_per_sec, cleanup for PR

* benchmark: cleanup, add results, add a data exploration notebook

* benchmark: add a README, lower default runs from 5 to 3

* benchmark: notebook wording tweaks

* copy 'detect_leaks=0' from ASAN to LSAN

fix for issue #1733, set "detect_leaks=0" when ASAN_OPTIONS contains it and LSAN_OPTIONS are not set.

* fix of fix: make sure ASAN_OPTIONS and LSAN_OPTIONS agree on leak detection

* fix lsan fix

* clang-format 16->17

* Add missing initialisation for havoc_queued during the custom mutator's stage.

* fix dictionary and cmin

* Use direct call to write to OpenBSD

The linker on OpenBSD emits a warning when linking this file:
warning: syscall() may go away, please rewrite code to use direct calls

* Fix possible doc inconsistency for custom mutator's queue_get function.

* update todos

* benchmark: Add support for COMPARISON file

* benchmark: show the number of cores used in COMPARISON

* benchmark: lower minimum Python version to 3.8

* benchmark: use afl's execs/s; increase CPU model width

* benchmark: disallow duplicate entries for the same CPU in COMPARISON

* Update benchmark.py

* fix inf in stats

* Fix benchmark.py

* missing closing parenthesis

* Update benchmark.py

* benchmark: remove self-calculation of execs/sec

* benchmark: update COMPARISON

* benchmark: Update Jupyter notebook and results file.

* benchmark: rename afl_execs_per_sec to execs_per_sec

* benchmark: update README

* update

* add benchmark

* nits

* add benchmarks

* Update unicornafl ref

* Pass correct Nyx ID when creating a Nyx runner

* Fix typo in docker pull command, add exampe to mount current dir as volume (#1914)

* mini fix

* add custom_post_run.c

* update afl-fuzz-run

* update python module

* format code

* update

* merge function

* changes

* code format

* improve cmplog

* nit

* nit

* fix

* fix

* Stop hardcoding the path /usr/local/lib/afl in afl-ld-lto.c and respect the configured PREFIX.

* Add benchmark for Raspberry Pi 5

* ryzen 5950 benchmark

* add missing raspery5

* comparison -> comparison.md

* removing options "-Wl,-rpath" "LLVM_LIBDIR" when using gcc

* fixing -Wl,-rpath=<LLVM_LIBDIR>

* nits

* fix

* afl-cc fixes

* nit

* add n_fuzz to ignore_timeouts

* fix

* Fix #1927

* in-depth blog post

* add AFL_FUZZER_LOOPCOUNT

* AFL_FUZZER_LOOPCOUNT

* fix 2 mutation bugs

* v4.09c release

* v4.10a init

* switch to explore powerschedule as default

* fix MUT_INSERTASCIINUM

* fix MUT_STRATEGY_ARRAY_SIZE

* fix bad fix for MUT_STRATEGY_ARRAY_SIZE

* remove afl-network-client on uninstall

* update nyx

* Improve binary-only related docs

* llvm 18 build fixes.

* code format

* Fix custom_send link

Add a leading '/' to walk in the repo root instead of current dir.

* Use ../ instead

* initial simple injection detection support

* inject docs

* fix for issue #1916, iLLVM crash in split-floatingpoint-compares

* LLVM 17 bug workaround

* finish injection implementation

* remove tmp todo

* update changelog

* forgot to add the injection pass

* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

* help selective instrumentation

* typos

* macos

* add compiler test script

* apple fixes

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Chris Ball <chris@printf.net>
Co-authored-by: hexcoder <hexcoder-@users.noreply.github.com>
Co-authored-by: hexcoder- <heiko@hexco.de>
Co-authored-by: Manuel Carrasco <m.carrasco@imperial.ac.uk>
Co-authored-by: Jasper Lievisse Adriaanse <j@jasper.la>
Co-authored-by: ifyGecko <26214995+ifyGecko@users.noreply.github.com>
Co-authored-by: Dominik Maier <domenukk@gmail.com>
Co-authored-by: Christian Holler (:decoder) <choller@mozilla.com>
Co-authored-by: Carlo Maragno <ste.maragno@gmail.com>
Co-authored-by: yangzao <yangzaocn@outlook.com>
Co-authored-by: Romain Geissler <romain.geissler@amadeus.com>
Co-authored-by: Jakob Lell <jakob@jakoblell.com>
Co-authored-by: vincenzo MEZZELA <vincenzo.mezzela@amadeus.com>
Co-authored-by: Andrea Fioraldi <andreafioraldi@gmail.com>
Co-authored-by: Bet4 <0xbet4@gmail.com>
Co-authored-by: David Carlier <devnexen@gmail.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
2024-01-20 10:19:46 +00:00
vanhauser-thc
e71d422b3c enhance custom mutator docs 2023-06-08 08:42:23 +02:00
vanhauser-thc
70da0c2e40 better tritondse support 2023-05-10 16:09:18 +02:00
vanhauser-thc
f756734ad2 fix attempt at post_process implementation 2023-04-13 12:07:27 +02:00
vanhauser-thc
eeca3a0b29 lots of fixes 2023-01-19 11:52:19 +01:00
vanhauser-thc
14d8eb9e40 autotoken: splicing; splice_optout 2023-01-18 22:17:14 +01:00
vanhauser-thc
4a7cd53f64 custom_send example 2022-11-14 21:26:17 +01:00
vanhauser-thc
c5f8869778 afl_custom_fuzz_send added 2022-11-11 10:46:45 +01:00
vanhauser-thc
c058ce37bb remove python2 reference 2022-11-01 14:05:31 +01:00
Dominik Maier
0f72a7473f Fix docs for fuzz_count in python 2022-09-27 13:45:39 +00:00
vanhauser-thc
0373628adf fix custom mutator examples 2022-07-19 17:28:57 +02:00
vanhauser-thc
ca4a8c0f92 post_process 0/NULL return support 2022-07-19 12:24:03 +02:00
llzmb
bb506de0b8 Fix various missed issues - 1st run 2021-12-05 19:40:56 +01:00
llzmb
3506077fd6 Add missing blank lines and remove double blank lines 2021-12-04 22:28:05 +01:00
llzmb
ae59ed8e9e Fix typos - 2nd run 2021-12-04 20:59:39 +01:00
llzmb
bcd81c377d Fix line length and formatting 2021-12-04 20:38:00 +01:00
llzmb
65c3db8625 Fix punctuation in connection with "e.g." 2021-12-02 21:11:01 +01:00
llzmb
a7694e299a Fix punctuation in connection with "however" 2021-12-02 21:08:26 +01:00
llzmb
c85e0dc4f0 Remove the word "we" 2021-12-02 21:08:26 +01:00
llzmb
fcbaddfd2b Fix spelling of words related to "build" 2021-12-02 21:08:16 +01:00
llzmb
b7395fa467 Change "AFL" to "AFL++" 2021-12-02 19:52:10 +01:00
llzmb
0ae9b0dff4 Remove the word "please" 2021-12-02 17:01:45 +01:00
llzmb
c31f4646cb Clean up docs folder 2021-11-21 21:11:52 +01:00
llzmb
df74625df0
Change afl to AFL in *.md (#1057)
Changes in *.md files:
- afl++ > AFL++ (acronym)
- afl > AFL (compare https://github.com/google/AFL)

Excluded from changes:
- source code
- function names
- paths (folder and file names)
- URLs
2021-08-08 01:29:32 +02:00
van Hauser
fff8c49f7c
Merge pull request #1034 from AFLplusplus/grammatron
Grammatron
2021-07-20 08:57:37 +02:00
vanhauser-thc
37fff16a36 update custom trim 2021-07-11 17:26:39 +02:00
vanhauser-thc
5bcbb2f59a port custom mutator changes 2021-07-09 12:42:17 +02:00
vanhauser-thc
5f6ff95e6a fix docs 2021-06-01 10:53:02 +02:00
vanhauser-thc
3b93729213 tweaks 2021-05-25 22:04:25 +02:00
Dominik Maier
a3f8fc5d1c moved custom_mutator examples 2021-04-26 16:03:08 +02:00
Yong-Hao Zou
2c5844f665
Update custom_mutators.md 2021-03-26 15:41:19 +08:00
julihoh
a5da9ce42c
custom mutator rust support (#752)
* custom mutator rust support

* clarify how to view documentation for rust mutators

* remove `FuzzResult` hack and clarify lifetimes of CustomMutator::fuzz

* rename TErr associated tyep to Error to be more idiomatic

* fix warnings

* add example for fallible custom mutator

* make Fallible Custom Mutator the default and implement it's handle_err method by default

* rename CustomMutator::handle_err to handle_error

* add example mutator using lain
2021-02-27 15:05:13 +01:00
hexcoder-
cf0c49dec5 typos/wording 2020-12-08 17:46:29 +01:00
Dominik Maier
1f34b9f8e1 added python mutator, documentation 2020-12-04 14:26:48 +01:00
vanhauser-thc
c05e4efbe9 renamed examples/ to utils/ 2020-12-01 14:40:30 +01:00
Dustin Spicuzza
cd0a25be5e
Use buffer protocol to retrieve result from python post_process (#605)
Saves an extra copy, gives post processing functions more flexibility
2020-11-18 20:29:17 +01:00
van Hauser
8e1047f5ef support custom mutator introspection 2020-11-10 14:08:21 +01:00
van Hauser
c20ba2c2c5 fix custom mutator doc 2020-10-13 15:51:58 +02:00
van Hauser
6c980e2a02 rewrite documentation 2020-08-31 12:56:14 +02:00
van Hauser
c7f0d30668 added afl_custom_fuzz_count 2020-08-24 17:32:41 +02:00
h1994st
67d7c364f6 Fix typo 2020-07-16 21:59:50 -04:00
Dominik Maier
97bddc8cfa
added critical whitespace 2020-05-15 01:52:56 +02:00
rish9101
9627458ecc Add post library API as custom mutator and rename pre_save 2020-05-13 18:59:12 +05:30
van Hauser
72f4a9f678 missing env var 2020-05-12 19:40:04 +02:00
van Hauser
060f4ea320 enforce mandatary custom functions 2020-05-12 17:05:12 +02:00
rish9101
7b9ac9d414 Specify usage of multiple custom mutators 2020-05-10 12:21:19 +05:30
Rishi Ranjan
cf9238e09d
Update docs and Changelog for custom_mutators (#355) 2020-05-09 00:01:11 +02:00
Dominik Maier
84a096561a tiny fixes 2020-04-01 13:10:07 +02:00
Dominik Maier
677f2c6ca9 mutator docs 2020-04-01 13:10:07 +02:00
Dominik Maier
da1a0249d7 merged dev 2020-04-01 13:10:06 +02:00