diff options
| author | van Hauser <vh@thc.org> | 2020-09-05 13:26:08 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-09-05 13:26:08 +0200 |
| commit | 81b1d85f6168cb0828b4afef5d7994dba3c6753e (patch) | |
| tree | 8ddfccbd1594c3f3c50025eb8cbe23f84a10fa20 /llvm_mode/README.instrim.md | |
| parent | fac108476c1cb5326cf4339b2a4c846828698816 (diff) | |
| parent | 2f90f2faba92c0ef5e081ff74b54fb07eb1faaa9 (diff) | |
| download | afl++-81b1d85f6168cb0828b4afef5d7994dba3c6753e.tar.gz | |
Merge pull request #548 from AFLplusplus/pre-3
Pre 3.0 changes
Diffstat (limited to 'llvm_mode/README.instrim.md')
| -rw-r--r-- | llvm_mode/README.instrim.md | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/llvm_mode/README.instrim.md b/llvm_mode/README.instrim.md deleted file mode 100644 index 7758091b..00000000 --- a/llvm_mode/README.instrim.md +++ /dev/null @@ -1,25 +0,0 @@ -# InsTrim - -InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing - -## Introduction - -InsTrim uses CFG and markers to instrument just what is necessary in the -binary in llvm_mode. It is about 10-15% faster without disadvantages. -It requires at least llvm version 3.8.0. - -## Usage - -Set the environment variable `AFL_LLVM_INSTRUMENT=CFG` or `AFL_LLVM_INSTRIM=1` -during compilation of the target. - -There is also an advanced mode which instruments loops in a way so that -afl-fuzz can see which loop path has been selected but not being able to -see how often the loop has been rerun. -This again is a tradeoff for speed for less path information. -To enable this mode set `AFL_LLVM_INSTRIM_LOOPHEAD=1`. - -## Background - -The paper: [InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing] -(https://www.ndss-symposium.org/wp-content/uploads/2018/07/bar2018_14_Hsu_paper.pdf) |