about summary refs log tree commit diff
path: root/TODO
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2020-02-07 19:41:48 +0100
committervan Hauser <vh@thc.org>2020-02-07 19:41:48 +0100
commite360726730aa9e4e54548f20f76da7de368fa35f (patch)
tree0a670f2ed8583ff44b9287eaac3f87bb3db7683b /TODO
parentfd8fe4dd088464230df2dc456c5a9fbf905c907f (diff)
downloadafl++-e360726730aa9e4e54548f20f76da7de368fa35f.tar.gz
todo update
Diffstat (limited to 'TODO')
-rw-r--r--TODO3
1 files changed, 3 insertions, 0 deletions
diff --git a/TODO b/TODO
index d153f1b4..b9c209f8 100644
--- a/TODO
+++ b/TODO
@@ -18,6 +18,9 @@ qemu_mode:
  - instrim for QEMU mode via static analysis (with r2pipe? or angr?)
    Idea: The static analyzer outputs a map in which each edge that must be
    skipped is marked with 1. QEMU loads it at startup in the parent process.
+ - rename qemu specific envs to AFL_QEMU (espec. AFL_ENTRYPOINT)
+ - add AFL_QEMU_EXITPOINT (maybe multiple?)
+ - add/implement AFL_QEMU_INST_LIBLIST and AFL_QEMU_NOINST_PROGRAM
 
 custom_mutators:
  - rip what Superion is doing into custom mutators for js, php, etc.