diff options
| author | Andrea Fioraldi <andreafioraldi@gmail.com> | 2020-03-06 16:43:18 +0100 |
|---|---|---|
| committer | Andrea Fioraldi <andreafioraldi@gmail.com> | 2020-03-06 16:43:18 +0100 |
| commit | 1d4a3c87f5473c218e047a9ff949bcbc3460763e (patch) | |
| tree | ddd8f0116b25d23647eb2877934923ee37b9e607 /qemu_mode/patches/i386-translate.diff | |
| parent | 6e8f249b20622f2a3cd230a25252b563fbb65a49 (diff) | |
| download | afl++-1d4a3c87f5473c218e047a9ff949bcbc3460763e.tar.gz | |
cmplog routines instrumentation for qemu mode on x86
Diffstat (limited to 'qemu_mode/patches/i386-translate.diff')
| -rw-r--r-- | qemu_mode/patches/i386-translate.diff | 22 |
1 files changed, 21 insertions, 1 deletions
diff --git a/qemu_mode/patches/i386-translate.diff b/qemu_mode/patches/i386-translate.diff index 8ccd6f4e..f0d1393b 100644 --- a/qemu_mode/patches/i386-translate.diff +++ b/qemu_mode/patches/i386-translate.diff @@ -1,5 +1,5 @@ diff --git a/target/i386/translate.c b/target/i386/translate.c -index 0dd5fbe4..a23da128 100644 +index 0dd5fbe4..0d405fb6 100644 --- a/target/i386/translate.c +++ b/target/i386/translate.c @@ -32,6 +32,8 @@ @@ -40,3 +40,23 @@ index 0dd5fbe4..a23da128 100644 next_byte: b = x86_ldub_code(env, s); /* Collect prefixes. */ +@@ -5056,6 +5063,9 @@ static target_ulong disas_insn(DisasContext *s, CPUState *cpu) + tcg_gen_ext16u_tl(s->T0, s->T0); + } + next_eip = s->pc - s->cs_base; ++ if (__afl_cmp_map && next_eip >= afl_start_code && ++ next_eip < afl_end_code) ++ gen_helper_afl_cmplog_rtn(cpu_env); + tcg_gen_movi_tl(s->T1, next_eip); + gen_push_v(s, s->T1); + gen_op_jmp_v(s->T0); +@@ -6544,6 +6554,9 @@ static target_ulong disas_insn(DisasContext *s, CPUState *cpu) + tval = (int16_t)insn_get(env, s, MO_16); + } + next_eip = s->pc - s->cs_base; ++ if (__afl_cmp_map && next_eip >= afl_start_code && ++ next_eip < afl_end_code) ++ gen_helper_afl_cmplog_rtn(cpu_env); + tval += next_eip; + if (dflag == MO_16) { + tval &= 0xffff; |