diff options
| author | van Hauser <vh@thc.org> | 2024-02-08 14:51:13 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-02-08 14:51:13 +0100 |
| commit | 48070e0148699fbd96dc9f4e5950565498d4ad43 (patch) | |
| tree | df6d533f841779a80b0160b57fdbff9337ae015b /docs | |
| parent | c23bbddde97d81fdb27351bade8f74fe71e49c21 (diff) | |
| parent | 698f1e272b8738cd1145ed687861fa5664f14c9b (diff) | |
| download | afl++-48070e0148699fbd96dc9f4e5950565498d4ad43.tar.gz | |
Merge branch '420' into dev
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/Changelog.md | 10 | ||||
| -rw-r--r-- | docs/env_variables.md | 3 |
2 files changed, 13 insertions, 0 deletions
diff --git a/docs/Changelog.md b/docs/Changelog.md index 48003f4b..e5169daf 100644 --- a/docs/Changelog.md +++ b/docs/Changelog.md @@ -3,6 +3,16 @@ This is the list of all noteworthy changes made in every public release of the tool. See README.md for the general instruction manual. +### Version ++4.20a (dev) + - afl-fuzz: + - the new deterministic fuzzing feature is now activated by default, + deactivate with -z. Parameters -d and -D are ignored. + - afl-cc: + - added collision free caller instrumentation to LTO mode. activate with + `AFL_LLVM_LTO_CALLER=1`. You can set a max depth to go through single + block functions with `AFL_LLVM_LTO_CALLER_DEPTH` (default 0) + + ### Version ++4.10c (release) - afl-fuzz: - default power schedule is now EXPLORE, due a fix in fast schedules diff --git a/docs/env_variables.md b/docs/env_variables.md index a972b6da..1e4fc7ba 100644 --- a/docs/env_variables.md +++ b/docs/env_variables.md @@ -248,6 +248,9 @@ use (which only ever the author of this LTO implementation will use). These are used if several separated instrumentations are performed which are then later combined. + - `AFL_LLVM_LTO_CALLER` activates collision free CALLER instrumentation + - `AFL_LLVM_LTO_CALLER` sets the maximum mumber of single block functions + to dig deeper into a real function. Default 0. - `AFL_LLVM_DOCUMENT_IDS=file` will document to a file which edge ID was given to which function. This helps to identify functions with variable bytes or which functions were touched by an input. |