aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2020-08-11 10:24:45 +0200
committervan Hauser <vh@thc.org>2020-08-11 10:24:45 +0200
commit0ba09ee85a65878e70d1a224f9d41fcbac3ff1e5 (patch)
treead22351558d02c9215be35b0ee2846d2ef90e625 /src
parent67dac152269c48245dca88140b1238b36d5e0954 (diff)
downloadafl++-0ba09ee85a65878e70d1a224f9d41fcbac3ff1e5.tar.gz
enhancements
Diffstat (limited to 'src')
-rw-r--r--src/afl-common.c30
-rw-r--r--src/afl-fuzz-one.c11
-rw-r--r--src/afl-fuzz.c11
3 files changed, 27 insertions, 25 deletions
diff --git a/src/afl-common.c b/src/afl-common.c
index dabeeedd..c1302080 100644
--- a/src/afl-common.c
+++ b/src/afl-common.c
@@ -138,7 +138,7 @@ void argv_cpy_free(char **argv) {
}
-u8 *find_binary_own_loc(u8 *fname, u8 *own_loc) {
+u8 *find_afl_binary(u8 *fname, u8 *own_loc) {
u8 *tmp, *rsl, *own_copy, *cp;
@@ -154,21 +154,25 @@ u8 *find_binary_own_loc(u8 *fname, u8 *own_loc) {
}
- own_copy = ck_strdup(own_loc);
- rsl = strrchr(own_copy, '/');
+ if (own_loc) {
- if (rsl) {
+ own_copy = ck_strdup(own_loc);
+ rsl = strrchr(own_copy, '/');
- *rsl = 0;
+ if (rsl) {
- cp = alloc_printf("%s/%s", own_copy, fname);
- ck_free(own_copy);
+ *rsl = 0;
- if (!access(cp, X_OK)) { return cp; }
+ cp = alloc_printf("%s/%s", own_copy, fname);
+ ck_free(own_copy);
- } else {
+ if (!access(cp, X_OK)) { return cp; }
+
+ } else {
- ck_free(own_copy);
+ ck_free(own_copy);
+
+ }
}
@@ -196,7 +200,7 @@ char **get_qemu_argv(u8 *own_loc, u8 **target_path_p, int argc, char **argv) {
/* Now we need to actually find the QEMU binary to put in argv[0]. */
- cp = find_binary_own_loc("afl-qemu-trace", own_loc);
+ cp = find_afl_binary("afl-qemu-trace", own_loc);
if (cp) {
@@ -241,12 +245,12 @@ char **get_wine_argv(u8 *own_loc, u8 **target_path_p, int argc, char **argv) {
/* Now we need to actually find the QEMU binary to put in argv[0]. */
- cp = find_binary_own_loc("afl-qemu-trace", own_loc);
+ cp = find_afl_binary("afl-qemu-trace", own_loc);
if (cp) {
ck_free(cp);
- cp = find_binary_own_loc("afl-wine-trace", own_loc);
+ cp = find_afl_binary("afl-wine-trace", own_loc);
if (cp) {
diff --git a/src/afl-fuzz-one.c b/src/afl-fuzz-one.c
index 9f38b8f8..2f724569 100644
--- a/src/afl-fuzz-one.c
+++ b/src/afl-fuzz-one.c
@@ -2236,8 +2236,8 @@ havoc_stage:
clone_to = rand_below(afl, temp_len);
- new_buf = ck_maybe_grow(BUF_PARAMS(out_scratch),
- temp_len + clone_len);
+ new_buf =
+ ck_maybe_grow(BUF_PARAMS(out_scratch), temp_len + clone_len);
/* Head */
@@ -2403,8 +2403,7 @@ havoc_stage:
if (temp_len + extra_len >= MAX_FILE) { break; }
- out_buf =
- ck_maybe_grow(BUF_PARAMS(out), temp_len + extra_len);
+ out_buf = ck_maybe_grow(BUF_PARAMS(out), temp_len + extra_len);
/* Tail */
memmove(out_buf + insert_at + extra_len, out_buf + insert_at,
@@ -2499,8 +2498,8 @@ havoc_stage:
clone_to = rand_below(afl, temp_len);
- u8 *temp_buf = ck_maybe_grow(BUF_PARAMS(out_scratch),
- temp_len + clone_len);
+ u8 *temp_buf =
+ ck_maybe_grow(BUF_PARAMS(out_scratch), temp_len + clone_len);
/* Head */
diff --git a/src/afl-fuzz.c b/src/afl-fuzz.c
index 11db004d..d2b2c2d9 100644
--- a/src/afl-fuzz.c
+++ b/src/afl-fuzz.c
@@ -1274,9 +1274,8 @@ int main(int argc, char **argv_orig, char **envp) {
ck_free(afl->taint_fsrv.target_path);
afl->argv_taint = ck_alloc(sizeof(char *) * (argc + 4 - optind));
- afl->taint_fsrv.target_path =
- find_binary_own_loc("afl-qemu-taint", argv[0]);
- afl->argv_taint[0] = find_binary_own_loc("afl-qemu-taint", argv[0]);
+ afl->taint_fsrv.target_path = find_afl_binary("afl-qemu-taint", argv[0]);
+ afl->argv_taint[0] = find_afl_binary("afl-qemu-taint", argv[0]);
if (!afl->argv_taint[0])
FATAL(
"Cannot find 'afl-qemu-taint', read qemu_taint/README.md on how to "
@@ -1308,19 +1307,19 @@ int main(int argc, char **argv_orig, char **envp) {
OKF("Taint forkserver successfully started");
- const rlim_t kStackSize = 256L * 1024L * 1024L; // min stack size = 256 Mb
+ const rlim_t kStackSize = 256L * 1024L * 1024L; // min stack size = 256 Mb
struct rlimit rl;
rl.rlim_cur = kStackSize;
if (getrlimit(RLIMIT_STACK, &rl) != 0)
WARNF("Setting a higher stack size failed!");
-#define BUF_PARAMS(name) (void **)&afl->name##_buf, &afl->name##_size
+ #define BUF_PARAMS(name) (void **)&afl->name##_buf, &afl->name##_size
u8 *tmp1 = ck_maybe_grow(BUF_PARAMS(eff), MAX_FILE + 4096);
u8 *tmp2 = ck_maybe_grow(BUF_PARAMS(ex), MAX_FILE + 4096);
u8 *tmp3 = ck_maybe_grow(BUF_PARAMS(in_scratch), MAX_FILE + 4096);
u8 *tmp4 = ck_maybe_grow(BUF_PARAMS(out), MAX_FILE + 4096);
u8 *tmp5 = ck_maybe_grow(BUF_PARAMS(out_scratch), MAX_FILE + 4096);
-#undef BUF_PARAMS
+ #undef BUF_PARAMS
if (!tmp1 || !tmp2 || !tmp3 || !tmp4 || !tmp5)
FATAL("memory issues. me hungry, feed me!");