about summary refs log tree commit diff
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2019-10-27 09:04:40 +0100
committervan Hauser <vh@thc.org>2019-10-27 09:04:40 +0100
commit4de38fe40a4e0dac34c178c4ef6f4cb213fb3ee3 (patch)
treeab310b6bdee143e1009ebe28b14478c92d5afc30
parent8e41a59e2e00447a97208ed7cf0d163a3d47066b (diff)
downloadafl++-4de38fe40a4e0dac34c178c4ef6f4cb213fb3ee3.tar.gz
docs update
-rw-r--r--README.md6
-rw-r--r--docs/perf_tips.txt9
2 files changed, 9 insertions, 6 deletions
diff --git a/README.md b/README.md
index de012e62..88a86aaa 100644
--- a/README.md
+++ b/README.md
@@ -55,9 +55,9 @@
   | Feature/Instrumentation | AFL-GCC | LLVM_MODE | GCC_PLUGIN | QEMU_MODE | Unicorn |
   | ----------------------- |:-------:|:---------:|:----------:|:---------:|:-------:|
   | laf-intel / CompCov     |         |     x     |            |     x     |    x    |
-  | NeverZero               |    X    |     x(1)  |      (2)   |     x     |    x    |
-  | Persistent mode         |         |     x     |     X      |     x     |         |
-  | Whitelist               |         |     x     |     X      |           |         |
+  | NeverZero               |    x    |     x(1)  |      (2)   |     x     |    x    |
+  | Persistent mode         |         |     x     |     x      |     x     |         |
+  | Whitelist               |         |     x     |     x      |           |         |
   | InsTrim                 |         |     x     |            |           |         |
 
   neverZero:
diff --git a/docs/perf_tips.txt b/docs/perf_tips.txt
index 2fa19234..0cac8f7b 100644
--- a/docs/perf_tips.txt
+++ b/docs/perf_tips.txt
@@ -56,9 +56,9 @@ a file.
 3) Use LLVM instrumentation
 ---------------------------
 
-When fuzzing slow targets, you can gain 2x performance improvement by using
-the LLVM-based instrumentation mode described in llvm_mode/README.llvm. Note
-that this mode requires the use of clang and will not work with GCC.
+When fuzzing slow targets, you can gain 20-100% performance improvement by
+using the LLVM-based instrumentation mode described in llvm_mode/README.llvm.
+Note that this mode requires the use of clang and will not work with GCC.
 
 The LLVM mode also offers a "persistent", in-process fuzzing mode that can
 work well for certain types of self-contained libraries, and for fast targets,
@@ -75,6 +75,9 @@ If you are only intested in specific parts of the code being fuzzed, you can
 whitelist the files that are actually relevant. This improves the speed and
 accuracy of afl. See llvm_mode/README.whitelist
 
+Also use the InsTrim mode on larger binaries, this improves performance and
+coverage a lot.
+
 4) Profile and optimize the binary
 ----------------------------------