diff options
author | Dominik Maier <domenukk@gmail.com> | 2020-03-07 03:37:32 +0100 |
---|---|---|
committer | Dominik Maier <domenukk@gmail.com> | 2020-03-07 03:40:42 +0100 |
commit | 1e30c3a941bb10658a0d0b7c07d62e5b011d12b9 (patch) | |
tree | efa25cd41ace2d3ff4615378ffc19d3d32b9c503 /docs/technical_details.md | |
parent | 2287534ec6dd68b06a5052caa4ab3305d15861ec (diff) | |
download | afl++-1e30c3a941bb10658a0d0b7c07d62e5b011d12b9.tar.gz |
afl-tmin hang mode added
Diffstat (limited to 'docs/technical_details.md')
-rw-r--r-- | docs/technical_details.md | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/technical_details.md b/docs/technical_details.md index 996bf162..a0453c91 100644 --- a/docs/technical_details.md +++ b/docs/technical_details.md @@ -286,8 +286,9 @@ operation of `afl-tmin` is as follows. First, the tool automatically selects the operating mode. If the initial input crashes the target binary, afl-tmin will run in non-instrumented mode, simply -keeping any tweaks that produce a simpler file but still crash the target. If -the target is non-crashing, the tool uses an instrumented mode and keeps only +keeping any tweaks that produce a simpler file but still crash the target. +The same mode is used for hangs, if `-H` (hang mode) is specified. +If the target is non-crashing, the tool uses an instrumented mode and keeps only the tweaks that produce exactly the same execution path. The actual minimization algorithm is: |