diff options
| author | Andrea Fioraldi <andreafioraldi@gmail.com> | 2021-03-04 10:33:16 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-03-04 10:33:16 +0100 |
| commit | 3bcfbf50389a2baef1a40079016fab2d3b04e9a8 (patch) | |
| tree | 548c0f0cf2d4267f4e249e533224f581bf9d3080 | |
| parent | f0c7967fbf4d6d3906693896f511b6679573c02b (diff) | |
| parent | 8bdb40b7631ea0a6f7dec8e51a6c69c6b3c7513d (diff) | |
| download | afl++-3bcfbf50389a2baef1a40079016fab2d3b04e9a8.tar.gz | |
Merge pull request #776 from realmadsci/afl-exclude-ranges
Add AFL_QEMU_EXCLUDE_RANGES
| -rw-r--r-- | include/envs.h | 1 | ||||
| -rw-r--r-- | qemu_mode/README.md | 7 |
2 files changed, 8 insertions, 0 deletions
diff --git a/include/envs.h b/include/envs.h index 143979c6..26f4de90 100644 --- a/include/envs.h +++ b/include/envs.h @@ -141,6 +141,7 @@ static char *afl_environment_variables[] = { "AFL_QEMU_PERSISTENT_RETADDR_OFFSET", "AFL_QEMU_PERSISTENT_EXITS", "AFL_QEMU_INST_RANGES", + "AFL_QEMU_EXCLUDE_RANGES", "AFL_QEMU_SNAPSHOT", "AFL_QUIET", "AFL_RANDOM_ALLOC_CANARY", diff --git a/qemu_mode/README.md b/qemu_mode/README.md index bc4c1d2c..a14cbe64 100644 --- a/qemu_mode/README.md +++ b/qemu_mode/README.md @@ -99,6 +99,13 @@ Just set AFL_QEMU_INST_RANGES=A,B,C... The format of the items in the list is either a range of addresses like 0x123-0x321 or a module name like module.so (that is matched in the mapped object filename). +Alternatively you can tell QEMU to ignore part of an address space for instrumentation. + +Just set AFL_QEMU_EXCLUDE_RANGES=A,B,C... + +The format of the items on the list is the same as for AFL_QEMU_INST_RANGES, and excluding ranges +takes priority over any included ranges or AFL_INST_LIBS. + ## 7) CompareCoverage CompareCoverage is a sub-instrumentation with effects similar to laf-intel. |