about summary refs log tree commit diff
diff options
context:
space:
mode:
authorvanhauser-thc <vh@thc.org>2021-04-14 18:24:05 +0200
committervanhauser-thc <vh@thc.org>2021-04-14 18:24:05 +0200
commit92a308133797a1926507361e71b84f8b1eacc754 (patch)
tree054a60de6614bcd5f6fc2597d23d113da69fe90c
parent5e72568a455bde8ac389b8b234cbdbbb0d33e015 (diff)
downloadafl++-92a308133797a1926507361e71b84f8b1eacc754.tar.gz
fix aflpp qemu hook
-rw-r--r--docs/Changelog.md1
-rw-r--r--utils/aflpp_driver/aflpp_qemu_driver_hook.c4
2 files changed, 3 insertions, 2 deletions
diff --git a/docs/Changelog.md b/docs/Changelog.md
index bd14e293..155eec66 100644
--- a/docs/Changelog.md
+++ b/docs/Changelog.md
@@ -31,6 +31,7 @@ sending a mail to <afl-users+subscribe@googlegroups.com>.
     - Leak Sanitizer support (AFL_USE_LSAN) added by Joshua Rogers, thanks!
     - Removed InsTrim instrumentation as it is not as good as PCGUARD
     - Removed automatic linking with -lc++ for LTO mode
+  - utils/aflpp_driver/aflpp_qemu_driver_hook fixed to work with qemu mode
   - add -d (dead fuzzer stats) to afl-whatsup
 
 ### Version ++3.12c (release)
diff --git a/utils/aflpp_driver/aflpp_qemu_driver_hook.c b/utils/aflpp_driver/aflpp_qemu_driver_hook.c
index 823cc42d..dc58d852 100644
--- a/utils/aflpp_driver/aflpp_qemu_driver_hook.c
+++ b/utils/aflpp_driver/aflpp_qemu_driver_hook.c
@@ -3,8 +3,8 @@
 
 #define g2h(x) ((void *)((unsigned long)(x) + guest_base))
 
-#define REGS_RDI 7
-#define REGS_RSI 6
+#define REGS_RDI 4
+#define REGS_RSI 5
 
 void afl_persistent_hook(uint64_t *regs, uint64_t guest_base,
                          uint8_t *input_buf, uint32_t input_len) {