548 Commits

Author SHA1 Message Date
van Hauser
eda770fd32
push to stable (#1967)
* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

* help selective instrumentation

* typos

* macos

* add compiler test script

* apple fixes

* bump nyx submodules (#1963)

* fix docs

* update changelog

* update grammar mutator

* improve compiler test script

* gcc asan workaround (#1966)

* fix github merge fuckup

* fix

* Fix afl-cc (#1968)

- Check if too many cmdline params here, each time before insert a new param.
 - Check if it is "-fsanitize=..." before we do sth.
 - Remove improper param_st transfer.

* Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969)

* Dynamic instrumentation filtering for LLVM native (#1971)

* Add two dynamic instrumentation filter methods to runtime

* Always use pc-table with native pcguard

* Add make_symbol_list.py and README

* changelog

* todos

* new forkserver check

* fix

* nyx test for CI

* improve nyx docs

* Fixes to afl-cc and documentation (#1974)

* Always compile with -ldl when building for CODE_COVERAGE

When building with CODE_COVERAGE, the afl runtime contains code that
calls `dladdr` which requires -ldl. Under most circumstances, clang
already adds this (e.g. when building with pc-table), but there are some
circumstances where it isn't added automatically.

* Add visibility declaration to __afl_connected

When building with hidden visibility, the use of __AFL_LOOP inside such
code can cause linker errors due to __afl_connected being declared
"hidden".

* Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter

* nits

* nyx build script updates

* test error output

* debug ci

* debug ci

* Improve afl-cc (#1975)

* update response file support

 - full support of rsp file
 - fix some segv issues

* Improve afl-cc

 - remove dead code about allow/denylist options of sancov
 - missing `if (!aflcc->have_msan)`
 - add docs for each function
 - typo

* enable nyx

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* fix ci

* clean test script

* NO_NYX

* NO_NYX

* fix ci

* debug ci

* fix ci

* finalize ci fix

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
Co-authored-by: Sergej Schumilo <sergej@schumilo.de>
Co-authored-by: Christian Holler (:decoder) <choller@mozilla.com>
2024-02-01 14:13:07 +00:00
van Hauser
0c054f520e
push to stable (#1960)
* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
2024-01-18 15:17:48 +00:00
vanhauser-thc
5f492da717 update changelog 2023-12-30 11:00:28 +01:00
vanhauser-thc
88cbaeb3e1 LLVM 17 bug workaround 2023-12-29 10:03:02 +01:00
vanhauser-thc
daaefcddc0 code format 2023-12-24 10:35:02 +01:00
vanhauser-thc
806a76afae fix bad fix for MUT_STRATEGY_ARRAY_SIZE 2023-12-19 11:15:33 +01:00
vanhauser-thc
353ae3682a switch to explore powerschedule as default 2023-12-15 10:24:12 +01:00
vanhauser-thc
ca0c9f6d17 v4.10a init 2023-12-15 09:44:02 +01:00
vanhauser-thc
8a7705aedb v4.09c release 2023-12-15 09:28:39 +01:00
vanhauser-thc
37505928bc fix 2 mutation bugs 2023-12-15 09:23:30 +01:00
vanhauser-thc
ae9cdb34e4 AFL_FUZZER_LOOPCOUNT 2023-12-14 16:04:00 +01:00
vanhauser-thc
74f8ca6b46 improve cmplog 2023-11-28 10:26:37 +01:00
vanhauser-thc
dd9a04c901 code format 2023-11-28 09:14:29 +01:00
vanhauser-thc
5681267bbc nits 2023-11-20 09:32:00 +01:00
vanhauser-thc
ac0ad56348 fix dictionary and cmin 2023-11-07 10:31:09 +01:00
vanhauser-thc
2230f88887 add --help/--version/... 2023-11-03 11:19:14 +01:00
vanhauser-thc
6b73dee7da add afl-addseeds tool 2023-09-30 12:42:40 +02:00
vanhauser-thc
3b835b7c8b increase sync length 2023-09-12 16:05:56 +02:00
vanhauser-thc
9307ef4b7c fix string transform laf 2023-09-04 09:11:47 +02:00
vanhauser-thc
1604351368 changelog 2023-08-31 14:45:03 +02:00
vanhauser-thc
549e5dd926 AFL_IGNORE_SEED_PROBLEMS 2023-08-23 18:02:33 +02:00
vanhauser-thc
19d0c6a4c5 afl-whatsup startup detection 2023-08-23 17:35:24 +02:00
vanhauser-thc
f41d121f07 afl-whatsup -m -n 2023-08-22 10:03:03 +02:00
vanhauser-thc
213298fe59 afl-whatsup add coverage output 2023-08-21 16:38:48 +02:00
vanhauser-thc
c2c8e780a5 add benchmark 2023-08-16 10:50:07 +02:00
marc
8823f22a9c add AFL_FINAL_SYNC 2023-08-11 11:22:18 +02:00
marc
9607d1db06 v4.09a init 2023-08-10 10:56:20 +02:00
marc
3721c65a0b v4.08c release 2023-08-10 10:41:55 +02:00
marc
d9cadb2e7d -c - support 2023-08-09 16:31:30 +02:00
vanhauser-thc
5f813bbb86 improve cmplog level 3 2023-07-21 18:02:30 +02:00
vanhauser-thc
534b3eba14 qemu_get_symbol_addr.sh 2023-07-13 10:10:30 +02:00
vanhauser-thc
20dcb40c53 fix cmin -T 2023-07-08 13:31:06 +02:00
vanhauser-thc
3e1d794107 update mutation strategy 2023-06-29 16:57:20 +02:00
vanhauser-thc
edd352612d code format 2023-06-24 09:30:09 +02:00
vanhauser-thc
90f83c13d0 remove dead code, code format 2023-06-22 09:26:46 +02:00
vanhauser-thc
64b15a00f2 fix afl-cmin* for old afl vanilla issue 2023-06-21 12:20:10 +02:00
vanhauser-thc
7b29f2cd24 fix timeout for sessions restart and + usage 2023-06-20 19:58:14 +02:00
vanhauser-thc
3ad8e9856c update changelog 2023-06-12 09:23:57 +02:00
vanhauser-thc
61b6f4ed9e 4.08a init 2023-06-12 09:16:15 +02:00
vanhauser-thc
bf2727b763 v4.07c release 2023-06-12 08:28:47 +02:00
vanhauser-thc
a4b9272416 fix gcc cmplog crash 2023-06-07 10:58:10 +02:00
vanhauser-thc
9324f3f628 rewrote PCGUARD 2023-06-01 12:19:45 +02:00
vanhauser-thc
1d0694df86 add symqemu custom mutator 2023-05-17 15:25:26 +02:00
vanhauser-thc
7f636dbfc2 add @responsefile support for afl-cc 2023-05-12 15:58:20 +02:00
vanhauser-thc
93c821aaa3 afl-clang-lto incomptable with -flto=thin 2023-05-12 08:39:11 +02:00
vanhauser-thc
a752b15921 update qemu_mode 2023-05-12 08:29:31 +02:00
Dominik Maier
3a98d7af18 qemuafl: Persistent mode for PPC32 targets 2023-05-11 21:02:46 +02:00
vanhauser-thc
3e84d6a2ae afl++ -> AFL++ 2023-04-27 11:49:00 +02:00
vanhauser-thc
b18bc7b98f changelog updates 2023-04-26 16:25:03 +02:00
vanhauser-thc
d822181467 afl-cmin -T support 2023-04-25 13:13:43 +02:00