fast resume setup detection

1 files changed, 79 insertions, 21 deletions

diff --git a/src/afl-fuzz.c b/src/afl-fuzz.c
index a7ddef6e..bb05c9c6 100644
--- a/src/afl-fuzz.c
+++ b/src/afl-fuzz.c
@@ -2101,45 +2101,105 @@ int main(int argc, char **argv_orig, char **envp) {
 
   }
 
-  write_setup_file(afl, argc, argv);
-
   setup_cmdline_file(afl, argv + optind);
+  check_binary(afl, argv[optind]);
 
-  read_testcases(afl, NULL);
-  // read_foreign_testcases(afl, 1); for the moment dont do this
-  OKF("Loaded a total of %u seeds.", afl->queued_items);
+  u64 prev_target_hash = 0;
+  s32 fast_resume = 0, fr_fd = -1;
+
+  if (afl->in_place_resume) {
 
-  pivot_inputs(afl);
+    u8 fn[PATH_MAX], buf[32];
+    snprintf(fn, PATH_MAX, "%s/target_hash", afl->out_dir);
+    fr_fd = open(fn, O_RDONLY);
+    if (fr_fd >= 0) {
 
-  if (!afl->timeout_given) { find_timeout(afl); }  // only for resumes!
+      if (read(fr_fd, buf, 32) >= 16) {
 
-  if (afl->afl_env.afl_tmpdir && !afl->in_place_resume) {
+        sscanf(buf, "%p", (void**)&prev_target_hash);
 
-    char tmpfile[PATH_MAX];
+      }
 
-    if (afl->file_extension) {
+      close(fr_fd);
 
-      snprintf(tmpfile, PATH_MAX, "%s/.cur_input.%s", afl->tmp_dir,
-               afl->file_extension);
+    }
+
+  }
+
+
+  write_setup_file(afl, argc, argv);
+
+  if (afl->in_place_resume) {
+
+    u64 target_hash = get_binary_hash(afl->fsrv.target_path);
+
+    if (!target_hash || prev_target_hash != target_hash) {
+
+      ACTF("Target binary is different, cannot perform FAST RESUME!");
 
     } else {
 
-      snprintf(tmpfile, PATH_MAX, "%s/.cur_input", afl->tmp_dir);
+      u8 fn[PATH_MAX];
+      snprintf(fn, PATH_MAX, "%s/fastresume.bin", afl->out_dir);
+      if ((fr_fd = open(fn, O_RDONLY)) >= 0) {
+
+        OKF("Performing FAST RESUME");
+        // fast_resume = 1;
+
+      } else {
+
+        ACTF("fastresume.bin not found, cannot perform FAST RESUME!");
+
+      }
 
     }
 
-    /* there is still a race condition here, but well ... */
-    if (access(tmpfile, F_OK) != -1) {
+  }
 
-      FATAL(
-          "AFL_TMPDIR already has an existing temporary input file: %s - if "
-          "this is not from another instance, then just remove the file.",
-          tmpfile);
+  if (fast_resume) {
+
+    // XXX
+
+  } else {
+
+    read_testcases(afl, NULL);
+
+    pivot_inputs(afl);
+
+    if (!afl->timeout_given) { find_timeout(afl); }  // only for resumes!
+
+    if (afl->afl_env.afl_tmpdir && !afl->in_place_resume) {
+
+      char tmpfile[PATH_MAX];
+
+      if (afl->file_extension) {
+
+        snprintf(tmpfile, PATH_MAX, "%s/.cur_input.%s", afl->tmp_dir,
+                 afl->file_extension);
+
+      } else {
+
+        snprintf(tmpfile, PATH_MAX, "%s/.cur_input", afl->tmp_dir);
+
+      }
+
+      /* there is still a race condition here, but well ... */
+      if (access(tmpfile, F_OK) != -1) {
+
+        FATAL(
+            "AFL_TMPDIR already has an existing temporary input file: %s - if "
+            "this is not from another instance, then just remove the file.",
+            tmpfile);
+
+      }
 
     }
 
   }
 
+  // read_foreign_testcases(afl, 1); for the moment dont do this
+  OKF("Loaded a total of %u seeds.", afl->queued_items);
+
   /* If we don't have a file name chosen yet, use a safe default. */
 
   if (!afl->fsrv.out_file) {
@@ -2196,8 +2256,6 @@ int main(int argc, char **argv_orig, char **envp) {
 
   }
 
-  check_binary(afl, argv[optind]);
-
   #ifdef AFL_PERSISTENT_RECORD
   if (unlikely(afl->fsrv.persistent_record)) {