diff options
| author | vanhauser-thc <vh@thc.org> | 2021-04-14 18:49:02 +0200 |
|---|---|---|
| committer | vanhauser-thc <vh@thc.org> | 2021-04-14 18:49:02 +0200 |
| commit | fd8dc1455278bca16e852eb08ddac9a3e466b5c7 (patch) | |
| tree | 7c8c86f3abf6d11acc6b9a89a73aba775716be79 | |
| parent | f0d300b32a8a5b3adccc8209c151382244135082 (diff) | |
| download | afl++-fd8dc1455278bca16e852eb08ddac9a3e466b5c7.tar.gz | |
update readme
| -rw-r--r-- | utils/aflpp_driver/README.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/utils/aflpp_driver/README.md b/utils/aflpp_driver/README.md index 2c339d12..01bd10c0 100644 --- a/utils/aflpp_driver/README.md +++ b/utils/aflpp_driver/README.md @@ -22,4 +22,9 @@ are to be fuzzed in qemu_mode. So we compile them with clang/clang++, without `clang++ -o fuzz fuzzer_harness.cc libAFLQemuDriver.a [plus required linking]`. -Then just do `AFL_PRELOAD=/path/to/aflpp_qemu_driver_hook.so afl-fuzz -Q ... -- ./fuzz` + +Then just do (where the name of the binary is `fuzz`): +``` +AFL_QEMU_PERSISTENT_ADDR=0x$(nm fuzz | grep "T LLVMFuzzerTestOneInput" | awk '{print $1}') +AFL_QEMU_PERSISTENT_HOOK=/path/to/aflpp_qemu_driver_hook.so afl-fuzz -Q ... -- ./fuzz` +``` |