about summary refs log tree commit diff
diff options
context:
space:
mode:
authorDominik Maier <domenukk@gmail.com>2019-08-29 03:06:24 +0200
committerDominik Maier <domenukk@gmail.com>2019-08-29 03:06:24 +0200
commit3f2a317af09982a47340593b224a10b79a81d303 (patch)
tree93ebe17accbe0d64edfb62f08b8ac846d5a72b81
parent892513708bb5f68b15610fe0c74b892d4421c8cd (diff)
downloadafl++-3f2a317af09982a47340593b224a10b79a81d303.tar.gz
Fixed SIGSEV due to wrong pointer size
-rw-r--r--qemu_mode/patches/afl-qemu-cpu-translate-inl.h2
-rw-r--r--qemu_mode/patches/afl-qemu-translate-inl.h2
-rw-r--r--unicorn_mode/patches/afl-unicorn-cpu-inl.h2
-rw-r--r--unicorn_mode/patches/afl-unicorn-tcg-runtime-inl.h2
4 files changed, 4 insertions, 4 deletions
diff --git a/qemu_mode/patches/afl-qemu-cpu-translate-inl.h b/qemu_mode/patches/afl-qemu-cpu-translate-inl.h
index c0caeefc..e91e9ffa 100644
--- a/qemu_mode/patches/afl-qemu-cpu-translate-inl.h
+++ b/qemu_mode/patches/afl-qemu-cpu-translate-inl.h
@@ -49,7 +49,7 @@ void tcg_gen_afl_compcov_log_call(void *func, target_ulong cur_loc,
 #  define INC_AFL_AREA(loc) \
     asm volatile ( \
       "incb (%0, %1, 1)\n" \
-      "adc $0, (%0, %1, 1)\n" \
+      "adcb $0, (%0, %1, 1)\n" \
       : /* no out */ \
       : "r" (afl_area_ptr), "r" (loc) \
       : "memory", "eax" \
diff --git a/qemu_mode/patches/afl-qemu-translate-inl.h b/qemu_mode/patches/afl-qemu-translate-inl.h
index 48d05179..a33e17b7 100644
--- a/qemu_mode/patches/afl-qemu-translate-inl.h
+++ b/qemu_mode/patches/afl-qemu-translate-inl.h
@@ -51,7 +51,7 @@ void afl_maybe_log(target_ulong cur_loc) {
 #if (defined(__x86_64__) || defined(__i386__)) && defined(AFL_QEMU_NOT_ZERO)
   asm volatile (
     "incb (%0, %1, 1)\n"
-    "adc $0, (%0, %1, 1)\n"
+    "adcb $0, (%0, %1, 1)\n"
     : /* no out */
     : "r" (afl_area_ptr), "r" (afl_idx)
     : "memory", "eax"
diff --git a/unicorn_mode/patches/afl-unicorn-cpu-inl.h b/unicorn_mode/patches/afl-unicorn-cpu-inl.h
index 187a0ce6..ff194696 100644
--- a/unicorn_mode/patches/afl-unicorn-cpu-inl.h
+++ b/unicorn_mode/patches/afl-unicorn-cpu-inl.h
@@ -252,7 +252,7 @@ static inline void afl_maybe_log(struct uc_struct* uc, unsigned long cur_loc) {
 #if (defined(__x86_64__) || defined(__i386__)) && defined(AFL_QEMU_NOT_ZERO)
   asm volatile (
     "incb (%0, %1, 1)\n"
-    "adc $0, (%0, %1, 1)\n"
+    "adcb $0, (%0, %1, 1)\n"
     : /* no out */
     : "r" (uc->afl_area_ptr), "r" (afl_idx)
     : "memory", "eax"
diff --git a/unicorn_mode/patches/afl-unicorn-tcg-runtime-inl.h b/unicorn_mode/patches/afl-unicorn-tcg-runtime-inl.h
index e59d7b15..52cc1afb 100644
--- a/unicorn_mode/patches/afl-unicorn-tcg-runtime-inl.h
+++ b/unicorn_mode/patches/afl-unicorn-tcg-runtime-inl.h
@@ -36,7 +36,7 @@
 #  define INC_AFL_AREA(loc) \
     asm volatile ( \
       "incb (%0, %1, 1)\n" \
-      "adc $0, (%0, %1, 1)\n" \
+      "adcb $0, (%0, %1, 1)\n" \
       : /* no out */ \
       : "r" (uc->afl_area_ptr), "r" (loc) \
       : "memory", "eax" \