about summary refs log tree commit diff
diff options
context:
space:
mode:
authorvanhauser-thc <vh@thc.org>2021-07-11 17:26:31 +0200
committervanhauser-thc <vh@thc.org>2021-07-11 17:26:39 +0200
commit37fff16a36c49f47c1a10fcf7c03aa1361a1ae2b (patch)
treead400b9dbd861abfeff3ba99dca55f3f551a137c
parent4ef12d7215b980399f81cee9cb9a7873cf1d3d78 (diff)
downloadafl++-37fff16a36c49f47c1a10fcf7c03aa1361a1ae2b.tar.gz
update custom trim
-rw-r--r--docs/custom_mutators.md4
-rw-r--r--src/afl-fuzz-mutators.c2
2 files changed, 2 insertions, 4 deletions
diff --git a/docs/custom_mutators.md b/docs/custom_mutators.md
index 129d6676..2c0ca3c5 100644
--- a/docs/custom_mutators.md
+++ b/docs/custom_mutators.md
@@ -204,9 +204,7 @@ trimmed input. Here's a quick API description:
     arguments because we already have the initial buffer from `init_trim` and we
     can memorize the current state in the data variables. This can also save
     reparsing steps for each iteration. It should return the trimmed input
-    buffer, where the returned data must not exceed the initial input data in
-    length. Returning anything that is larger than the original data (passed to
-    `init_trim`) will result in a fatal abort of AFL++.
+    buffer.
 
 - `post_trim` (optional)
 
diff --git a/src/afl-fuzz-mutators.c b/src/afl-fuzz-mutators.c
index e27d6fae..6a77dfbc 100644
--- a/src/afl-fuzz-mutators.c
+++ b/src/afl-fuzz-mutators.c
@@ -339,7 +339,7 @@ u8 trim_case_custom(afl_state_t *afl, struct queue_entry *q, u8 *in_buf,
 
   }
 
-  while (afl->stage_cur < afl->stage_max) {
+  while (afl->stage_cur <= afl->stage_max) {
 
     u8 *retbuf = NULL;