mirror of
https://github.com/AFLplusplus/AFLplusplus.git
synced 2025-06-24 06:42:42 +00:00
* Output afl-clang-fast stuffs only if necessary (#1912) * afl-cc header * afl-cc common declarations - Add afl-cc-state.c - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c - Use debugf_args in main - Modify execvp stuffs to fit new aflcc struct * afl-cc show usage * afl-cc mode selecting 1. compiler_mode by callname in argv[0] 2. compiler_mode by env "AFL_CC_COMPILER" 3. compiler_mode/instrument_mode by command line options "--afl-..." 4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT" 5. final checking steps 6. print "... - mode: %s-%s\n" 7. determine real argv[0] according to compiler_mode * afl-cc macro defs * afl-cc linking behaviors * afl-cc fsanitize behaviors * afl-cc misc * afl-cc body update * afl-cc all-in-one formated with custom-format.py * nits --------- Co-authored-by: vanhauser-thc <vh@thc.org> * changelog * update grammar mutator * lto llvm 12+ * docs(custom_mutators): fix missing ':' (#1953) * Fix broken LTO mode and response file support (#1948) * Strip `-Wl,-no-undefined` during compilation (#1952) Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`. Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix). * Remove dead code in write_to_testcase (#1955) The custom_mutators_count check in if case is duplicate with if condition. The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed. Signed-off-by: Xeonacid <h.dwwwwww@gmail.com> * update qemuafl * WIP: Add ability to generate drcov trace using QEMU backend (#1956) * Document new drcov QEMU plugin * Add link to lightkeeper for QEMU drcov file loading --------- Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com> * code format * changelog * sleep on uid != 0 afl-system-config * fix segv about skip_next, warn on unsupported cases of linking options (#1958) * todos * ensure afl-cc only allows available compiler modes * update grammar mutator * disable aslr on apple * fix for arm64 * help selective instrumentation * typos * macos * add compiler test script * apple fixes * bump nyx submodules (#1963) * fix docs * update changelog * update grammar mutator * improve compiler test script * gcc asan workaround (#1966) * fix github merge fuckup * fix * Fix afl-cc (#1968) - Check if too many cmdline params here, each time before insert a new param. - Check if it is "-fsanitize=..." before we do sth. - Remove improper param_st transfer. * Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969) * Dynamic instrumentation filtering for LLVM native (#1971) * Add two dynamic instrumentation filter methods to runtime * Always use pc-table with native pcguard * Add make_symbol_list.py and README * changelog * todos * new forkserver check * fix * nyx test for CI * improve nyx docs * Fixes to afl-cc and documentation (#1974) * Always compile with -ldl when building for CODE_COVERAGE When building with CODE_COVERAGE, the afl runtime contains code that calls `dladdr` which requires -ldl. Under most circumstances, clang already adds this (e.g. when building with pc-table), but there are some circumstances where it isn't added automatically. * Add visibility declaration to __afl_connected When building with hidden visibility, the use of __AFL_LOOP inside such code can cause linker errors due to __afl_connected being declared "hidden". * Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter * nits * nyx build script updates * test error output * debug ci * debug ci * Improve afl-cc (#1975) * update response file support - full support of rsp file - fix some segv issues * Improve afl-cc - remove dead code about allow/denylist options of sancov - missing `if (!aflcc->have_msan)` - add docs for each function - typo * enable nyx * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * fix ci * clean test script * NO_NYX * NO_NYX * fix ci * debug ci * fix ci * finalize ci fix --------- Signed-off-by: Xeonacid <h.dwwwwww@gmail.com> Co-authored-by: Sonic <50692172+SonicStark@users.noreply.github.com> Co-authored-by: Xeonacid <h.dwwwwww@gmail.com> Co-authored-by: Nils Bars <nils.bars@rub.de> Co-authored-by: Jean-Romain Garnier <7504819+JRomainG@users.noreply.github.com> Co-authored-by: Jean-Romain Garnier <jean-romain.garnier@airbus.com> Co-authored-by: Sergej Schumilo <sergej@schumilo.de> Co-authored-by: Christian Holler (:decoder) <choller@mozilla.com>
144 lines
4.2 KiB
Bash
Executable File
144 lines
4.2 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# All tests should start with sourcing test-pre.sh and finish with sourcing test-post.sh
|
|
# They may set an error code with $CODE=1
|
|
# If tests are incomplete, they may set $INCOMPLETE=1
|
|
|
|
AFL_TEST_COUNT=$((AFL_TEST_COUNT+1))
|
|
AFL_TEST_DEPTH=$((AFL_TEST_DEPTH+1))
|
|
|
|
if [ $AFL_TEST_DEPTH = 1 ]; then
|
|
# First run :)
|
|
|
|
#
|
|
# Ensure we have: test, type, diff, grep -qE
|
|
#
|
|
test -z "" 2>/dev/null || { echo Error: test command not found ; exit 1 ; }
|
|
GREP=`type grep > /dev/null 2>&1 && echo OK`
|
|
test "$GREP" = OK || { echo Error: grep command not found ; exit 1 ; }
|
|
echo foobar | grep -qE 'asd|oob' 2>/dev/null || { echo Error: grep command does not support -q and/or -E option ; exit 1 ; }
|
|
test -e ./test-all.sh || cd $(dirname $0) || exit 1
|
|
test -e ./test-all.sh || { echo Error: you must be in the test/ directory ; exit 1 ; }
|
|
export AFL_PATH=`pwd`/..
|
|
export AFL_TRY_AFFINITY=1 # workaround for travis that fails for no avail cores
|
|
|
|
echo 1 > test.1
|
|
echo 1 > test.2
|
|
OK=OK
|
|
diff test.1 test.2 >/dev/null 2>&1 || OK=
|
|
rm -f test.1 test.2
|
|
test -z "$OK" && { echo Error: diff is not working ; exit 1 ; }
|
|
test -z "$LLVM_CONFIG" && LLVM_CONFIG=llvm-config
|
|
|
|
# check for '-a' option of grep
|
|
if grep -a test test-all.sh >/dev/null 2>&1; then
|
|
GREPAOPTION=' -a'
|
|
else
|
|
GREPAOPTION=
|
|
fi
|
|
|
|
test_compcov_binary_functionality() {
|
|
RUN="../afl-showmap -m ${MEM_LIMIT} -o /dev/null -- $1"
|
|
$RUN 'LIBTOKENCAP' | grep 'your string was LIBTOKENCAP' \
|
|
&& $RUN 'BUGMENOT' | grep 'your string was BUGMENOT' \
|
|
&& $RUN 'BANANA' | grep 'your string started with BAN' \
|
|
&& $RUN 'APRI' | grep 'your string was APRI' \
|
|
&& $RUN 'kiWI' | grep 'your string was Kiwi' \
|
|
&& $RUN 'Avocado' | grep 'your string was avocado' \
|
|
&& $RUN 'GRAX' 3 | grep 'your string was a prefix of Grapes' \
|
|
&& $RUN 'LOCALVARIABLE' | grep 'local var memcmp works!' \
|
|
&& $RUN 'abc' | grep 'short local var memcmp works!' \
|
|
&& $RUN 'GLOBALVARIABLE' | grep 'global var memcmp works!'
|
|
} > /dev/null
|
|
|
|
ECHO="printf %b\\n"
|
|
$ECHO \\101 2>&1 | grep -qE '^A' || {
|
|
ECHO=
|
|
test -e /bin/printf && {
|
|
ECHO="/bin/printf %b\\n"
|
|
$ECHO "\\101" 2>&1 | grep -qE '^A' || ECHO=
|
|
}
|
|
}
|
|
test -z "$ECHO" && { printf Error: printf command does not support octal character codes ; exit 1 ; }
|
|
|
|
export AFL_EXIT_WHEN_DONE=1
|
|
export AFL_EXIT_ON_TIME=60
|
|
export AFL_SKIP_CPUFREQ=1
|
|
export AFL_I_DONT_CARE_ABOUT_MISSING_CRASHES=1
|
|
unset AFL_NO_X86
|
|
unset AFL_QUIET
|
|
unset AFL_DEBUG
|
|
unset AFL_HARDEN
|
|
unset AFL_USE_ASAN
|
|
unset AFL_USE_MSAN
|
|
unset AFL_USE_UBSAN
|
|
unset AFL_USE_LSAN
|
|
unset AFL_TMPDIR
|
|
unset AFL_CC
|
|
unset AFL_PRELOAD
|
|
unset AFL_GCC_INSTRUMENT_FILE
|
|
unset AFL_LLVM_INSTRUMENT_FILE
|
|
unset AFL_LLVM_INSTRIM
|
|
unset AFL_LLVM_LAF_SPLIT_SWITCHES
|
|
unset AFL_LLVM_LAF_TRANSFORM_COMPARES
|
|
unset AFL_LLVM_LAF_SPLIT_COMPARES
|
|
unset AFL_QEMU_PERSISTENT_ADDR
|
|
unset AFL_QEMU_PERSISTENT_RETADDR_OFFSET
|
|
unset AFL_QEMU_PERSISTENT_GPR
|
|
unset AFL_QEMU_PERSISTENT_RET
|
|
unset AFL_QEMU_PERSISTENT_HOOK
|
|
unset AFL_QEMU_PERSISTENT_CNT
|
|
unset AFL_QEMU_PERSISTENT_MEM
|
|
unset AFL_QEMU_PERSISTENT_EXITS
|
|
unset AFL_CUSTOM_MUTATOR_LIBRARY
|
|
unset AFL_PYTHON_MODULE
|
|
unset AFL_PRELOAD
|
|
unset LD_PRELOAD
|
|
unset SKIP
|
|
|
|
rm -rf in in2 out
|
|
|
|
test -z "$TRAVIS_OS_NAME" && {
|
|
export ASAN_OPTIONS=detect_leaks=0:allocator_may_return_null=1:abort_on_error=1:symbolize=0
|
|
}
|
|
test -n "$TRAVIS_OS_NAME" && {
|
|
export ASAN_OPTIONS=detect_leaks=0:allocator_may_return_null=1:abort_on_error=1:symbolize=1
|
|
}
|
|
|
|
#export AFL_LLVM_INSTRUMENT=AFL # AFL mode makes dlopen not link on macos
|
|
|
|
# on OpenBSD we need to work with llvm from /usr/local/bin
|
|
test -e /usr/local/bin/opt && {
|
|
test `uname -s` = 'Darwin' || export PATH="/usr/local/bin:${PATH}"
|
|
}
|
|
# on MacOS X we prefer afl-clang over afl-gcc, because
|
|
# afl-gcc does not work there (it is a symlink from clang)
|
|
test `uname -s` = 'Darwin' -o `uname -s` = 'FreeBSD' && {
|
|
AFL_GCC=afl-clang
|
|
} || {
|
|
AFL_GCC=afl-gcc
|
|
}
|
|
command -v gcc >/dev/null 2>&1 || AFL_GCC=afl-clang
|
|
|
|
SYS=`uname -m`
|
|
|
|
GREY="\\033[1;90m"
|
|
BLUE="\\033[1;94m"
|
|
GREEN="\\033[0;32m"
|
|
RED="\\033[0;31m"
|
|
YELLOW="\\033[1;93m"
|
|
RESET="\\033[0m"
|
|
|
|
MEM_LIMIT=none
|
|
|
|
export PATH="${PATH}:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin"
|
|
|
|
$ECHO "${RESET}${GREY}[*] starting AFL++ test framework ..."
|
|
|
|
test -z "$SYS" && $ECHO "$YELLOW[-] uname -m did not succeed"
|
|
|
|
CODE=0
|
|
INCOMPLETE=0
|
|
|
|
fi
|