aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorvanhauser-thc <vh@thc.org>2021-04-14 17:30:08 +0200
committervanhauser-thc <vh@thc.org>2021-04-14 17:30:08 +0200
commitae9087b3909a1d6dc631e59df9f200b11c60e0a2 (patch)
treea11cd4221b4284ee81b6e9f6dd5cab52252f3452
parent1edc3ece6172be28802f1856bee758ff5acfd91c (diff)
downloadafl++-ae9087b3909a1d6dc631e59df9f200b11c60e0a2.tar.gz
update havoc
-rw-r--r--src/afl-fuzz-one.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/src/afl-fuzz-one.c b/src/afl-fuzz-one.c
index 28ec0c46..d72d4145 100644
--- a/src/afl-fuzz-one.c
+++ b/src/afl-fuzz-one.c
@@ -2002,7 +2002,7 @@ havoc_stage:
u32 r_max, r;
r_max = (MAX_HAVOC_ENTRY + 1) + (afl->extras_cnt ? 4 : 0) +
- (afl->a_extras_cnt ? 2 : 0);
+ (afl->a_extras_cnt ? 4 : 0);
if (unlikely(afl->expand_havoc && afl->ready_for_splicing_count > 1)) {
@@ -2587,7 +2587,7 @@ havoc_stage:
if (afl->a_extras_cnt) {
- if (r == 0) {
+ if (r < 2) {
/* Use the dictionary. */
@@ -2607,7 +2607,7 @@ havoc_stage:
break;
- } else if (r == 1) {
+ } else if (r < 4) {
u32 use_extra = rand_below(afl, afl->a_extras_cnt);
u32 extra_len = afl->a_extras[use_extra].len;
@@ -2636,7 +2636,7 @@ havoc_stage:
} else {
- r -= 2;
+ r -= 4;
}