1135 Commits

Author SHA1 Message Date
van Hauser
eda770fd32
push to stable (#1967)
* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

* help selective instrumentation

* typos

* macos

* add compiler test script

* apple fixes

* bump nyx submodules (#1963)

* fix docs

* update changelog

* update grammar mutator

* improve compiler test script

* gcc asan workaround (#1966)

* fix github merge fuckup

* fix

* Fix afl-cc (#1968)

- Check if too many cmdline params here, each time before insert a new param.
 - Check if it is "-fsanitize=..." before we do sth.
 - Remove improper param_st transfer.

* Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969)

* Dynamic instrumentation filtering for LLVM native (#1971)

* Add two dynamic instrumentation filter methods to runtime

* Always use pc-table with native pcguard

* Add make_symbol_list.py and README

* changelog

* todos

* new forkserver check

* fix

* nyx test for CI

* improve nyx docs

* Fixes to afl-cc and documentation (#1974)

* Always compile with -ldl when building for CODE_COVERAGE

When building with CODE_COVERAGE, the afl runtime contains code that
calls `dladdr` which requires -ldl. Under most circumstances, clang
already adds this (e.g. when building with pc-table), but there are some
circumstances where it isn't added automatically.

* Add visibility declaration to __afl_connected

When building with hidden visibility, the use of __AFL_LOOP inside such
code can cause linker errors due to __afl_connected being declared
"hidden".

* Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter

* nits

* nyx build script updates

* test error output

* debug ci

* debug ci

* Improve afl-cc (#1975)

* update response file support

 - full support of rsp file
 - fix some segv issues

* Improve afl-cc

 - remove dead code about allow/denylist options of sancov
 - missing `if (!aflcc->have_msan)`
 - add docs for each function
 - typo

* enable nyx

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* fix ci

* clean test script

* NO_NYX

* NO_NYX

* fix ci

* debug ci

* fix ci

* finalize ci fix

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
Co-authored-by: Sergej Schumilo <sergej@schumilo.de>
Co-authored-by: Christian Holler (:decoder) <choller@mozilla.com>
2024-02-01 14:13:07 +00:00
van Hauser
0c054f520e
push to stable (#1960)
* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
2024-01-18 15:17:48 +00:00
vanhauser-thc
5f492da717 update changelog 2023-12-30 11:00:28 +01:00
van Hauser
2260a065f4
Merge pull request #1944 from AFLplusplus/inject
Inject fuzzing
2023-12-30 10:51:47 +01:00
vanhauser-thc
88cbaeb3e1 LLVM 17 bug workaround 2023-12-29 10:03:02 +01:00
vanhauser-thc
98a2a334de inject docs 2023-12-27 13:58:25 +01:00
Xeonacid
c3197dfeb7
Use ../ instead 2023-12-25 18:30:46 +08:00
Xeonacid
a9e6998b82
Fix custom_send link
Add a leading '/' to walk in the repo root instead of current dir.
2023-12-25 13:50:32 +08:00
vanhauser-thc
daaefcddc0 code format 2023-12-24 10:35:02 +01:00
Bet4
86d76b52ac Improve binary-only related docs 2023-12-21 23:48:43 +08:00
vanhauser-thc
806a76afae fix bad fix for MUT_STRATEGY_ARRAY_SIZE 2023-12-19 11:15:33 +01:00
vanhauser-thc
353ae3682a switch to explore powerschedule as default 2023-12-15 10:24:12 +01:00
vanhauser-thc
ca0c9f6d17 v4.10a init 2023-12-15 09:44:02 +01:00
vanhauser-thc
8a7705aedb v4.09c release 2023-12-15 09:28:39 +01:00
vanhauser-thc
37505928bc fix 2 mutation bugs 2023-12-15 09:23:30 +01:00
vanhauser-thc
ae9cdb34e4 AFL_FUZZER_LOOPCOUNT 2023-12-14 16:04:00 +01:00
vanhauser-thc
a576f7aef4 in-depth blog post 2023-12-12 09:34:04 +01:00
vanhauser-thc
638273e4f8 nits 2023-12-05 17:38:32 +01:00
vanhauser-thc
74f8ca6b46 improve cmplog 2023-11-28 10:26:37 +01:00
vanhauser-thc
dd9a04c901 code format 2023-11-28 09:14:29 +01:00
Carlo Maragno
d17e0b32f4
Fix typo in docker pull command, add exampe to mount current dir as volume (#1914) 2023-11-23 00:05:56 +01:00
vanhauser-thc
5681267bbc nits 2023-11-20 09:32:00 +01:00
van Hauser
a6efdfdb15
Merge pull request #1905 from m-carrasco/fix-queue-get-docs
Fix possible doc inconsistency for custom mutator's queue_get function.
2023-11-09 15:12:11 +01:00
Manuel Carrasco
6f8696c314 Fix possible doc inconsistency for custom mutator's queue_get function. 2023-11-09 13:46:41 +00:00
vanhauser-thc
ac0ad56348 fix dictionary and cmin 2023-11-07 10:31:09 +01:00
vanhauser-thc
2230f88887 add --help/--version/... 2023-11-03 11:19:14 +01:00
Jesse Schwartzentruber
cf458a7d25 Add an env to afl-clang-fast to disable setting rpath if LLVM path isn't
recognized
2023-10-23 21:57:21 -04:00
vanhauser-thc
6b73dee7da add afl-addseeds tool 2023-09-30 12:42:40 +02:00
Thomas Rooijakkers
54f0148157
UTF-8 line rendering for status screen as default 2023-09-19 13:31:29 +02:00
Thomas Rooijakkers
0b6e74eeb0
Add support for UTF-8 line rendering 2023-09-13 15:49:04 +02:00
vanhauser-thc
3b835b7c8b increase sync length 2023-09-12 16:05:56 +02:00
vanhauser-thc
19c387a824 update multicore recommendation 2023-09-12 09:54:05 +02:00
vanhauser-thc
9307ef4b7c fix string transform laf 2023-09-04 09:11:47 +02:00
vanhauser-thc
1604351368 changelog 2023-08-31 14:45:03 +02:00
vanhauser-thc
c60431247e update docs 2023-08-29 16:38:31 +02:00
vanhauser-thc
549e5dd926 AFL_IGNORE_SEED_PROBLEMS 2023-08-23 18:02:33 +02:00
vanhauser-thc
19d0c6a4c5 afl-whatsup startup detection 2023-08-23 17:35:24 +02:00
vanhauser-thc
f41d121f07 afl-whatsup -m -n 2023-08-22 10:03:03 +02:00
vanhauser-thc
213298fe59 afl-whatsup add coverage output 2023-08-21 16:38:48 +02:00
vanhauser-thc
c2c8e780a5 add benchmark 2023-08-16 10:50:07 +02:00
vanhauser-thc
4d8d8633ff update faq 2023-08-13 11:44:37 +02:00
marc
8823f22a9c add AFL_FINAL_SYNC 2023-08-11 11:22:18 +02:00
marc
9607d1db06 v4.09a init 2023-08-10 10:56:20 +02:00
marc
3721c65a0b v4.08c release 2023-08-10 10:41:55 +02:00
van Hauser
b4bd33961c
Merge pull request #1821 from junwha0511/crashing-seeds-as-new-crash
Implement an option for treating crashing seeds as new crash
2023-08-09 14:39:25 +00:00
marc
d9cadb2e7d -c - support 2023-08-09 16:31:30 +02:00
vanhauser-thc
0a28bce016 update docs 2023-08-04 09:45:11 +02:00
Junwha
a61e1ffe4d Add AFL_CRASHING_SEEDS_AS_NEW_CRASH to doc
Signed-off-by: Junwha <qbit@unist.ac.kr>
2023-08-02 19:21:41 +09:00
vanhauser-thc
f87ba7ed63 doc fix 2023-07-28 15:18:12 +02:00
vanhauser-thc
5f813bbb86 improve cmplog level 3 2023-07-21 18:02:30 +02:00