diff options
author | vanhauser-thc <vh@thc.org> | 2023-05-16 14:54:02 +0200 |
---|---|---|
committer | vanhauser-thc <vh@thc.org> | 2023-05-16 14:54:02 +0200 |
commit | dfdc6fd12cdae1fe2dab1183f20d3c312a7f2f6d (patch) | |
tree | 3f2d86d8d52c50412091caabe6229afd72e15a3a | |
parent | 49997e60cba8dc260d45cc0ce68fa810588e2f23 (diff) | |
download | afl++-dfdc6fd12cdae1fe2dab1183f20d3c312a7f2f6d.tar.gz |
add missing envs in the docs
-rw-r--r-- | docs/env_variables.md | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/env_variables.md b/docs/env_variables.md index b1f23159..0f0869d2 100644 --- a/docs/env_variables.md +++ b/docs/env_variables.md @@ -619,6 +619,14 @@ The QEMU wrapper used to instrument binary-only code supports several settings: - Setting `AFL_INST_LIBS` causes the translator to also instrument the code inside any dynamically linked libraries (notably including glibc). + - You can use `AFL_QEMU_INST_RANGES=0xaaaa-0xbbbb,0xcccc-0xdddd` to just + instrument specific memory locations, e.g. a specific library. + Excluding ranges takes priority over any included ranges or `AFL_INST_LIBS`. + + - You can use `AFL_QEMU_EXCLUDE_RANGES=0xaaaa-0xbbbb,0xcccc-0xdddd` to **NOT** + instrument specific memory locations, e.g. a specific library. + Excluding ranges takes priority over any included ranges or `AFL_INST_LIBS`. + - It is possible to set `AFL_INST_RATIO` to skip the instrumentation on some of the basic blocks, which can be useful when dealing with very complex binaries. |