7305 Commits

Author SHA1 Message Date
Khaled Yakdan
1e7485dcee
Fix type in AFL_NOOPT env variable in afl-cc help message (#1982) 2024-02-03 09:49:45 +00:00
vanhauser-thc
ba3a039e45 finish lto-ctx 2024-02-02 13:17:20 +01:00
Sergej Schumilo
58871777ae
update QEMU-Nyx submodule (#1980) 2024-02-02 10:03:10 +00:00
Sergej Schumilo
f98dc8abe8
update QEMU-Nyx submodule (#1978) 2024-02-02 09:16:33 +00:00
vanhauser-thc
bd13d32437 final touches 2024-02-02 09:54:24 +01:00
Han Zheng
028d4c8c64
remove redundant eff struct (#1977) 2024-02-01 17:53:07 +01:00
vanhauser-thc
79080355ac better CTX instrumentation 2024-02-01 17:39:23 +01:00
vanhauser-thc
ba28f5fbfa remove unused var 2024-02-01 16:01:16 +01:00
vanhauser-thc
5ba66a8860 final touches for skipdet 2024-02-01 15:22:51 +01:00
Han Zheng
06f0982f0f
Enhancement on Deterministic stage (#1972)
* fuzzer: init commit based on aflpp 60dc37a8cf09f8e9048e4b6a2204d6c90b27655a

* fuzzers: adding the skip variables and initialize

* log: profile the det/havoc finding

* log: add profile log output

* fuzzers: sperate log/skipdet module

* fuzzers: add quick eff_map calc

* fuzzers: add skip_eff_map in fuzz_one

* fuzzers: mark whole input space in eff_map

* fuzzers: add undet bit threshold to skip some seeds

* fuzzers: fix one byte overflow

* fuzzers: fix overflow

* fix code format

* add havoc only again

* code format

* remove log to INTROSPECTION, rename skipdet module

* rename skipdet module

* remove log to stats

* clean redundant code

* code format

* remove redundant code format check

* remove redundant doc

* remove redundant objects

* clean files

* change -d to default skipdet

* disable deterministic when using CUSTOM_MUTATOR

* revert fix
2024-02-01 14:13:21 +00:00
van Hauser
eda770fd32
push to stable (#1967)
* Output afl-clang-fast stuffs only if necessary (#1912)

* afl-cc header

* afl-cc common declarations

 - Add afl-cc-state.c
 - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c
 - Use debugf_args in main
 - Modify execvp stuffs to fit new aflcc struct

* afl-cc show usage

* afl-cc mode selecting

1. compiler_mode by callname in argv[0]
2. compiler_mode by env "AFL_CC_COMPILER"
3. compiler_mode/instrument_mode by command line options "--afl-..."
4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT"
5. final checking steps
6. print "... - mode: %s-%s\n"
7. determine real argv[0] according to compiler_mode

* afl-cc macro defs

* afl-cc linking behaviors

* afl-cc fsanitize behaviors

* afl-cc misc

* afl-cc body update

* afl-cc all-in-one

formated with custom-format.py

* nits

---------

Co-authored-by: vanhauser-thc <vh@thc.org>

* changelog

* update grammar mutator

* lto llvm 12+

* docs(custom_mutators): fix missing ':' (#1953)

* Fix broken LTO mode and response file support (#1948)

* Strip `-Wl,-no-undefined` during compilation (#1952)

Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`.
Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix).

* Remove dead code in write_to_testcase (#1955)

The custom_mutators_count check in if case is duplicate with if condition.
The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed.

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>

* update qemuafl

* WIP: Add ability to generate drcov trace using QEMU backend (#1956)

* Document new drcov QEMU plugin

* Add link to lightkeeper for QEMU drcov file loading

---------

Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>

* code format

* changelog

* sleep on uid != 0 afl-system-config

* fix segv about skip_next, warn on unsupported cases of linking options (#1958)

* todos

* ensure afl-cc only allows available compiler modes

* update grammar mutator

* disable aslr on apple

* fix for arm64

* help selective instrumentation

* typos

* macos

* add compiler test script

* apple fixes

* bump nyx submodules (#1963)

* fix docs

* update changelog

* update grammar mutator

* improve compiler test script

* gcc asan workaround (#1966)

* fix github merge fuckup

* fix

* Fix afl-cc (#1968)

- Check if too many cmdline params here, each time before insert a new param.
 - Check if it is "-fsanitize=..." before we do sth.
 - Remove improper param_st transfer.

* Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969)

* Dynamic instrumentation filtering for LLVM native (#1971)

* Add two dynamic instrumentation filter methods to runtime

* Always use pc-table with native pcguard

* Add make_symbol_list.py and README

* changelog

* todos

* new forkserver check

* fix

* nyx test for CI

* improve nyx docs

* Fixes to afl-cc and documentation (#1974)

* Always compile with -ldl when building for CODE_COVERAGE

When building with CODE_COVERAGE, the afl runtime contains code that
calls `dladdr` which requires -ldl. Under most circumstances, clang
already adds this (e.g. when building with pc-table), but there are some
circumstances where it isn't added automatically.

* Add visibility declaration to __afl_connected

When building with hidden visibility, the use of __AFL_LOOP inside such
code can cause linker errors due to __afl_connected being declared
"hidden".

* Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter

* nits

* nyx build script updates

* test error output

* debug ci

* debug ci

* Improve afl-cc (#1975)

* update response file support

 - full support of rsp file
 - fix some segv issues

* Improve afl-cc

 - remove dead code about allow/denylist options of sancov
 - missing `if (!aflcc->have_msan)`
 - add docs for each function
 - typo

* enable nyx

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* debug ci

* fix ci

* clean test script

* NO_NYX

* NO_NYX

* fix ci

* debug ci

* fix ci

* finalize ci fix

---------

Signed-off-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com>
Co-authored-by: Xeonacid <h.dwwwwww@gmail.com>
Co-authored-by: Nils Bars <nils.bars@rub.de>
Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com>
Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com>
Co-authored-by: Sergej Schumilo <sergej@schumilo.de>
Co-authored-by: Christian Holler (:decoder) <choller@mozilla.com>
2024-02-01 14:13:07 +00:00
vanhauser-thc
37d2039211 finalize ci fix 2024-02-01 14:53:10 +01:00
vanhauser-thc
d8e8d34c4e fix ci 2024-02-01 14:34:07 +01:00
vanhauser-thc
96ada75bd9 debug ci 2024-02-01 14:18:36 +01:00
vanhauser-thc
87596105ef fix ci 2024-02-01 14:01:59 +01:00
vanhauser-thc
ac639012fb NO_NYX 2024-02-01 13:45:21 +01:00
vanhauser-thc
a84b7c7820 NO_NYX 2024-02-01 13:45:05 +01:00
vanhauser-thc
5549212d9e clean test script 2024-02-01 12:59:37 +01:00
vanhauser-thc
eb52f1cc08 fix ci 2024-02-01 12:58:51 +01:00
vanhauser-thc
236fb9b145 debug ci 2024-02-01 12:03:02 +01:00
vanhauser-thc
e5d305ad42 debug ci 2024-02-01 11:43:04 +01:00
vanhauser-thc
76a033431d debug ci 2024-02-01 11:16:16 +01:00
vanhauser-thc
7793692590 debug ci 2024-02-01 10:26:16 +01:00
vanhauser-thc
97ba817aa7 debug ci 2024-02-01 09:56:31 +01:00
vanhauser-thc
6e6d91b6b0 debug ci 2024-02-01 09:23:01 +01:00
vanhauser-thc
123ec5d136 debug ci 2024-02-01 09:06:34 +01:00
vanhauser-thc
5da5d6e0df debug ci 2024-02-01 08:48:41 +01:00
vanhauser-thc
c33de47120 enable nyx 2024-02-01 08:48:41 +01:00
Sonic
643df2b538
Improve afl-cc (#1975)
* update response file support

 - full support of rsp file
 - fix some segv issues

* Improve afl-cc

 - remove dead code about allow/denylist options of sancov
 - missing `if (!aflcc->have_msan)`
 - add docs for each function
 - typo
2024-02-01 07:17:48 +00:00
vanhauser-thc
970e0b14ce debug ci 2024-02-01 08:13:52 +01:00
vanhauser-thc
3768933c92 debug ci 2024-01-31 17:43:37 +01:00
vanhauser-thc
da5d3d63e2 test error output 2024-01-31 17:00:04 +01:00
vanhauser-thc
ccad11f7eb nyx build script updates 2024-01-31 14:03:25 +01:00
vanhauser-thc
0d164e4c18 nits 2024-01-30 16:27:03 +01:00
Christian Holler (:decoder)
644e069450
Fixes to afl-cc and documentation (#1974)
* Always compile with -ldl when building for CODE_COVERAGE

When building with CODE_COVERAGE, the afl runtime contains code that
calls `dladdr` which requires -ldl. Under most circumstances, clang
already adds this (e.g. when building with pc-table), but there are some
circumstances where it isn't added automatically.

* Add visibility declaration to __afl_connected

When building with hidden visibility, the use of __AFL_LOOP inside such
code can cause linker errors due to __afl_connected being declared
"hidden".

* Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter
2024-01-30 14:30:18 +00:00
vanhauser-thc
75af391408 improve nyx docs 2024-01-30 15:14:02 +01:00
vanhauser-thc
9604fe922e nyx test for CI 2024-01-30 15:06:34 +01:00
vanhauser-thc
d5b6c0f773 fix 2024-01-30 11:01:49 +01:00
vanhauser-thc
12ab9ebd32 new forkserver check 2024-01-30 09:55:44 +01:00
vanhauser-thc
4859b583ad todos 2024-01-28 15:11:15 +01:00
vanhauser-thc
e6eee685ce fix 2024-01-27 15:13:27 +01:00
vanhauser-thc
ceb7e44e6f fixes 2024-01-27 08:28:47 +01:00
vanhauser-thc
1ffb1b6b2a changelog 2024-01-26 16:58:17 +01:00
vanhauser-thc
d668010bed fixes 2024-01-26 16:44:31 +01:00
Christian Holler (:decoder)
58b80b68bc
Dynamic instrumentation filtering for LLVM native (#1971)
* Add two dynamic instrumentation filter methods to runtime

* Always use pc-table with native pcguard

* Add make_symbol_list.py and README
2024-01-26 14:46:56 +00:00
vanhauser-thc
44a7696169 fixes 2024-01-26 15:27:20 +01:00
Christian Holler (:decoder)
2f9eeef60c
Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969) 2024-01-26 13:41:23 +00:00
vanhauser-thc
b0a912a838 working ugly version 2024-01-26 12:15:42 +01:00
vanhauser-thc
4d493452a4 tmp 2024-01-25 17:00:53 +01:00
Sonic
d88c97ad28
Fix afl-cc (#1968)
- Check if too many cmdline params here, each time before insert a new param.
 - Check if it is "-fsanitize=..." before we do sth.
 - Remove improper param_st transfer.
2024-01-25 08:57:50 +00:00