diff options
| author | vanhauser-thc <vh@thc.org> | 2021-03-25 15:35:06 +0100 |
|---|---|---|
| committer | vanhauser-thc <vh@thc.org> | 2021-03-25 15:35:06 +0100 |
| commit | 0029c1a83ef03825c2d19c73151189f159458496 (patch) | |
| tree | 6a21d22eaa597b57636b01feec76b8bc23c5d3c4 /instrumentation/README.instrim.md | |
| parent | 447d232caf9fcd9e6e40c24d17000ff9b98ab693 (diff) | |
| download | afl++-0029c1a83ef03825c2d19c73151189f159458496.tar.gz | |
remove InsTrim
Diffstat (limited to 'instrumentation/README.instrim.md')
| -rw-r--r-- | instrumentation/README.instrim.md | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/instrumentation/README.instrim.md b/instrumentation/README.instrim.md deleted file mode 100644 index 99f6477a..00000000 --- a/instrumentation/README.instrim.md +++ /dev/null @@ -1,30 +0,0 @@ -# InsTrim - -InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing - -## Introduction - -InsTrim is the work of Chin-Chia Hsu, Che-Yu Wu, Hsu-Chun Hsiao and Shih-Kun Huang. - -It uses a CFG (call flow graph) and markers to instrument just what -is necessary in the binary (ie less than llvm_mode). As a result the binary is -about 10-15% faster compared to normal llvm_mode however with some coverage loss. -It requires at least llvm version 3.8.0 to build. -If you have LLVM 7+ we recommend PCGUARD instead. - -## Usage - -Set the environment variable `AFL_LLVM_INSTRUMENT=CFG` or `AFL_LLVM_INSTRIM=1` -during compilation of the target. - -There is also special mode which instruments loops in a way so that -afl-fuzz can see which loop path has been selected but not being able to -see how often the loop has been rerun. -This again is a tradeoff for speed for less path information. -To enable this mode set `AFL_LLVM_INSTRIM_LOOPHEAD=1`. - -## Background - -The paper from Chin-Chia Hsu, Che-Yu Wu, Hsu-Chun Hsiao and Shih-Kun Huang: -[InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing] -(https://www.ndss-symposium.org/wp-content/uploads/2018/07/bar2018_14_Hsu_paper.pdf) |
