about summary refs log tree commit diff
path: root/README.md
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2020-07-29 14:30:22 +0200
committervan Hauser <vh@thc.org>2020-07-29 14:30:22 +0200
commitffe5619a9d0934f9088ef32ddbd507a0ddbde321 (patch)
tree1ce79495c6ba66ed3c528a9c6a8a54e5791e08fc /README.md
parent3b194e16903e841ec0e6f5c7ae0352709c9e802b (diff)
downloadafl++-ffe5619a9d0934f9088ef32ddbd507a0ddbde321.tar.gz
fix snapshot include
Diffstat (limited to 'README.md')
-rw-r--r--README.md11
1 files changed, 6 insertions, 5 deletions
diff --git a/README.md b/README.md
index c6893fa0..d747ea00 100644
--- a/README.md
+++ b/README.md
@@ -272,11 +272,12 @@ afl-clang-lto:
    To use this set the following environment variable before compiling the
    target: `export AFL_LLVM_LAF_ALL=1`
    You can read more about this in [llvm/README.laf-intel.md](llvm/README.laf-intel.md)
- * A different technique is to instrument the target so that any compare values
-   in the target are sent to afl++ which then tries to put this value into the
-   fuzzing data at different locations. This technique is very fast and good -
-   if the target does not transform input data before comparison. Therefore
-   technique is called `input to state` or `redqueen`.
+ * A different technique (and usually a bit better than laf-intel) is to
+   instrument the target so that any compare values in the target are sent to
+   afl++ which then tries to put this value into the fuzzing data at different
+   locations. This technique is very fast and good - if the target does not
+   transform input data before comparison. Therefore this technique is called
+   `input to state` or `redqueen`.
    If you want to use this technique, then you have to compile the target
    twice, once specifically with/for this mode.
    You can read more about this in [llvm_mode/README.cmplog.md](llvm_mode/README.cmplog.md)