about summary refs log tree commit diff
path: root/src
diff options
context:
space:
mode:
authorvanhauser-thc <vh@thc.org>2021-04-14 17:30:08 +0200
committervanhauser-thc <vh@thc.org>2021-04-14 17:30:08 +0200
commitae9087b3909a1d6dc631e59df9f200b11c60e0a2 (patch)
treea11cd4221b4284ee81b6e9f6dd5cab52252f3452 /src
parent1edc3ece6172be28802f1856bee758ff5acfd91c (diff)
downloadafl++-ae9087b3909a1d6dc631e59df9f200b11c60e0a2.tar.gz
update havoc
Diffstat (limited to 'src')
-rw-r--r--src/afl-fuzz-one.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/src/afl-fuzz-one.c b/src/afl-fuzz-one.c
index 28ec0c46..d72d4145 100644
--- a/src/afl-fuzz-one.c
+++ b/src/afl-fuzz-one.c
@@ -2002,7 +2002,7 @@ havoc_stage:
   u32 r_max, r;
 
   r_max = (MAX_HAVOC_ENTRY + 1) + (afl->extras_cnt ? 4 : 0) +
-          (afl->a_extras_cnt ? 2 : 0);
+          (afl->a_extras_cnt ? 4 : 0);
 
   if (unlikely(afl->expand_havoc && afl->ready_for_splicing_count > 1)) {
 
@@ -2587,7 +2587,7 @@ havoc_stage:
 
           if (afl->a_extras_cnt) {
 
-            if (r == 0) {
+            if (r < 2) {
 
               /* Use the dictionary. */
 
@@ -2607,7 +2607,7 @@ havoc_stage:
 
               break;
 
-            } else if (r == 1) {
+            } else if (r < 4) {
 
               u32 use_extra = rand_below(afl, afl->a_extras_cnt);
               u32 extra_len = afl->a_extras[use_extra].len;
@@ -2636,7 +2636,7 @@ havoc_stage:
 
             } else {
 
-              r -= 2;
+              r -= 4;
 
             }