diff options
author | vanhauser-thc <vh@thc.org> | 2022-08-14 12:24:42 +0200 |
---|---|---|
committer | vanhauser-thc <vh@thc.org> | 2022-08-14 12:30:23 +0200 |
commit | 3200e6515b9cc988d0d8dccd27257baccc8df021 (patch) | |
tree | 6a3538d9e3d13a78a5227fca69258c46a9fb5c76 /docs/fuzzing_in_depth.md | |
parent | 89d6e306f29d1424012cdbb95d5cb18f6e36932f (diff) | |
download | afl++-3200e6515b9cc988d0d8dccd27257baccc8df021.tar.gz |
add AFL_NO_STARTUP_CALIBRATION feature
Diffstat (limited to 'docs/fuzzing_in_depth.md')
-rw-r--r-- | docs/fuzzing_in_depth.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/fuzzing_in_depth.md b/docs/fuzzing_in_depth.md index 37889137..92c9910b 100644 --- a/docs/fuzzing_in_depth.md +++ b/docs/fuzzing_in_depth.md @@ -626,6 +626,9 @@ from other fuzzers in the campaign first. If you have a large corpus, a corpus from a previous run or are fuzzing in a CI, then also set `export AFL_CMPLOG_ONLY_NEW=1` and `export AFL_FAST_CAL=1`. +If the queue in the CI is huge and/or the execution time is slow then you can +also add `AFL_NO_STARTUP_CALIBRATION=1` to skip the initial queue calibration +phase and start fuzzing at once. You can also use different fuzzers. If you are using AFL spinoffs or AFL conforming fuzzers, then just use the same -o directory and give it a unique @@ -902,6 +905,10 @@ complex file formats. Some notes on continuous integration (CI) fuzzing - this fuzzing is different to normal fuzzing campaigns as these are much shorter runnings. +If the queue in the CI is huge and/or the execution time is slow then you can +also add `AFL_NO_STARTUP_CALIBRATION=1` to skip the initial queue calibration +phase and start fuzzing at once. + 1. Always: * LTO has a much longer compile time which is diametrical to short fuzzing - hence use afl-clang-fast instead. |