402 Commits

Author SHA1 Message Date
van Hauser
6b3b1775b6 improving on splice candidate check patch 2020-09-25 12:03:24 +02:00
Vitalii Akolzin
888d63748a Fix potential endless loop in custom_mutator_stage
Co-authored-by: Ivan Gulakov <gulakov@ispras.ru>
2020-09-24 18:25:32 +03:00
van Hauser
7ff9800804 fix exploit, mmopt and rare schedule 2020-09-19 15:13:15 +02:00
Edznux
4561a9590f
WIP. basic state working: submitting statsd metrics (path, crashes, hangs) 2020-09-17 01:29:09 +02:00
vanhauser-thc
e30b2c6af6 final changes for pre-3.0 2020-09-05 13:18:28 +02:00
vanhauser-thc
4b3ad5f037 add cull queue, -i subdir traversal 2020-09-05 12:32:10 +02:00
hexcoder-
0625eb0a05 avoid signed ints for amounts (which are positive) 2020-09-04 22:26:39 +02:00
van Hauser
6c715f1a69 more changes to fuzzer_setup 2020-09-04 17:04:42 +02:00
Thomas Rooijakkers
50f61b64b1
Make open_file() inline 2020-09-04 16:22:22 +02:00
Thomas Rooijakkers
809a7cffe2
Write set environment variables in an env file style. 2020-09-04 16:02:09 +02:00
Thomas Rooijakkers
6adaacbb3a
Seperate fuzzer_setup from fuzzer_stats, only write fuzzer_setup at the start 2020-09-04 15:54:57 +02:00
Dominik Maier
4697e4a5a5 description for AFL_MAX_DET_EXTRAS added 2020-08-31 12:26:41 +02:00
Dominik Maier
92b1f9cf36 added SO link about rand for clarification 2020-08-31 12:11:38 +02:00
van Hauser
4566bcf122 code-format 2020-08-31 10:57:01 +02:00
Dominik Maier
4be0ea596b rand unlikely added 2020-08-26 13:04:03 +02:00
Dominik Maier
96ef7083c8 using unbiased rand_below 2020-08-26 05:28:33 +02:00
van Hauser
19eddbb0c7 make py functions as optional as they are in the doc 2020-08-24 18:12:08 +02:00
van Hauser
6a34c5aa3e fix python implementation for new function 2020-08-24 18:06:07 +02:00
van Hauser
c7f0d30668 added afl_custom_fuzz_count 2020-08-24 17:32:41 +02:00
Marius Muench
425908a00c
Option for specifying forkserver initialization timeout via environment variable (#522)
* Addition of AFL_FORKSRV_INIT_TMOUT env var

This commit introduces a new environment variable which allows to
specify the timespan AFL should wait for initial contact with the
forkserver.

This is useful for fuzz-targets requiring a rather long setup time
before the actual fuzzing can be started (e.g., unicorn).

* add .swp files to .gitignore

* Inherit init_tmout in afl_fsrv_init_dup

Without this patch, the forkserver would spawn with a timeout of 0 in
cmplog mode, leading to an immediate crash.

Additionally, this commit removes a spurious whitespace.

* Initialize afl->fsrv.init_tmout in afl_fsrv_init

Not all afl-components will need the new AFL_FORKSRV_INIT_TMOUT
environment variable. Hence, it's initialized to the safe "default"
value from before in afl_fsrv_init now.
2020-08-23 10:39:34 +02:00
Dominik Maier
1301552101 added AFL_MAX_DET_EXTRAS env var 2020-08-23 01:48:36 +02:00
van Hauser
47878f6974 add execs_done to plot file 2020-08-21 23:33:35 +02:00
Dominik Maier
1a94cfe2af moved autodict extras away from extras_a 2020-08-18 01:31:40 +02:00
Dominik Maier
7470b475a9
Reworked maybe_grow to take a single ptr, renamed to afl_realloc (#505)
* maybe_grow takes a single ptr

* fixed use_deflate

* reworked maybe_grow_bufsize

* helper to access underlying buf

* remove redundant realloc_block

* code format

* fixes

* added unit tests

* renamed maybe_grow to afl_realloc

* BUF_PARAMS -> AFL_BUF_PARAM
2020-08-18 00:50:52 +02:00
root
af14acf2c1 Revert "Merge branch 'debug' into dev"
This reverts commit a7537b5511ad767d2240cf2dc6d3e261daa676f9, reversing
changes made to 15e799f7ae666418e75c6a79db833c5316b21f97.
2020-08-14 14:35:05 +02:00
van Hauser
a7537b5511
Merge branch 'debug' into dev 2020-08-14 13:23:14 +02:00
van Hauser
ce513c4f3e fix llvm12 -fuseld warning 2020-08-14 10:10:23 +02:00
Dominik Maier
d1bc0207cc no longer using alloc for autodict 2020-08-14 01:33:03 +02:00
Dominik Maier
83df65a66b cleaned up maybe_add_auto calls 2020-08-14 00:46:15 +02:00
van Hauser
220dc4a43d review done, pray 2020-08-11 16:25:35 +02:00
van Hauser
4f695b6f4c fixes 2020-08-11 11:16:48 +02:00
van Hauser
67dac15226
Merge branch 'debug' into taint 2020-08-11 03:40:12 +02:00
van Hauser
e99d7e9730 integration in fuzz_one 2020-08-09 20:24:56 +02:00
van Hauser
b60663c031 taint integration done 2020-08-09 18:48:12 +02:00
van Hauser
32db31b555 fixes 2020-08-09 12:35:52 +02:00
van Hauser
a1129b67c2 changes 2020-08-09 12:15:36 +02:00
van Hauser
0bb59ba116 code format 2020-08-09 01:09:26 +02:00
van Hauser
e4a0237cbc step 1 2020-08-09 00:35:12 +02:00
murx-
9a1d526ed4 Add support for specific custom mutator name 2020-08-08 18:34:54 +02:00
van Hauser
f30ca1476c fix short write 2020-08-05 11:17:15 +02:00
van Hauser
585ec04503 silly rand_below_datalen fix 2020-08-05 09:21:39 +02:00
van Hauser
c8354d7516 new rand mode for data offsets that prefer low offset values 2020-08-04 23:22:42 +02:00
David Carlier
54d9668580 Haiku set explicitly to performance.
No command line to set through afl-system-config (the only one is a GUI).
2020-07-31 17:27:01 +00:00
van Hauser
320f26d26f add -b option to afl-fuzz 2020-07-30 19:00:41 +02:00
van Hauser
4550613f58
Merge branch 'dev' into text_inputs 2020-07-29 11:39:00 +02:00
van Hauser
16e362d2b9 add last 60s exec/s stat 2020-07-26 15:55:03 +02:00
van Hauser
30c0991543 better text mutation 2020-07-24 13:26:07 +02:00
van Hauser
9cddbc0420 add -F option to sync to foreign fuzzer queues 2020-07-24 12:26:52 +02:00
van Hauser
ce9b4698fe added andrea's splicing, added cycle_schedules 2020-07-21 20:53:51 +02:00
Andrea Fioraldi
c2b04bdf6c queue buffer and new splice havoc mutation 2020-07-16 14:32:41 +02:00