diff options
| author | van Hauser <vh@thc.org> | 2020-04-08 03:54:49 +0200 |
|---|---|---|
| committer | van Hauser <vh@thc.org> | 2020-04-08 03:56:12 +0200 |
| commit | 9ef4b45609c4bf6448b0ae08bc644f0aa7a9f88b (patch) | |
| tree | bd144cd50a77bb055ed0f26b0084a3c8e6e588d0 /docs | |
| parent | 452acf3a752f3ff360a5eebc526567cd3ba9a407 (diff) | |
| download | afl++-9ef4b45609c4bf6448b0ae08bc644f0aa7a9f88b.tar.gz | |
ctx done
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/Changelog.md | 4 | ||||
| -rw-r--r-- | docs/env_variables.md | 14 |
2 files changed, 17 insertions, 1 deletions
diff --git a/docs/Changelog.md b/docs/Changelog.md index 31a9b69a..7af8a62e 100644 --- a/docs/Changelog.md +++ b/docs/Changelog.md @@ -43,7 +43,9 @@ sending a mail to <afl-users+subscribe@googlegroups.com>. note that this mode is amazing, but quite some targets won't compile - Added llvm_mode NGRAM prev_loc coverage by Adrean Herrera (https://github.com/adrianherrera/afl-ngram-pass/), activate by setting - AFL_LLVM_NGRAM_SIZE + AFL_LLVM_INSTRUMENT=NGRAM-<value> or AFL_LLVM_NGRAM_SIZE=<value> + - Added llvm_mode context sensitive branch coverage, activated by setting + AFL_LLVM_INSTRUMENT=CTX or AFL_LLVM_CTX=1 - llvm_mode InsTrim mode: - removed workaround for bug where paths were not instrumented and imported fix by author diff --git a/docs/env_variables.md b/docs/env_variables.md index 10a17a99..802e7bd0 100644 --- a/docs/env_variables.md +++ b/docs/env_variables.md @@ -146,6 +146,20 @@ Then there are a few specific features that are only available in llvm_mode: - Setting AFL_LLVM_NGRAM_SIZE or AFL_LLVM_INSTRUMENT=NGRAM-{value} activates ngram prev_loc coverage, good values are 2, 4 or 8 (any value between 2 and 16 is valid). + It is highly recommended to increase the MAP_SIZE_POW2 definition in + config.h to at least 18 and maybe up to 20 for this as otherwise too + many map collisions occur. + + See llvm_mode/README.ctx.md + +### CTX + + - Setting AFL_LLVM_CTX or AFL_LLVM_INSTRUMENT=CTX + activates context sensitive branch coverage - meaning that each edge + is additionally combined with its caller. + It is highly recommended to increase the MAP_SIZE_POW2 definition in + config.h to at least 18 and maybe up to 20 for this as otherwise too + many map collisions occur. See llvm_mode/README.ngram.md |