aboutsummaryrefslogtreecommitdiff
path: root/utils/argv_fuzzing
diff options
context:
space:
mode:
authorMaciej Domanski <maciej.domanski@trailofbits.com>2022-12-27 16:15:52 +0100
committerMaciej Domanski <maciej.domanski@trailofbits.com>2022-12-27 16:15:52 +0100
commit3d031f93a6366ee157cfd9a27fbb6d485d328d8e (patch)
tree7c70b8e6dd57cdcc5844cb5219306e3a3e884400 /utils/argv_fuzzing
parent3a134edd889ed1bf4f8d11e8e37ebba31460fb3e (diff)
downloadafl++-3d031f93a6366ee157cfd9a27fbb6d485d328d8e.tar.gz
update
Diffstat (limited to 'utils/argv_fuzzing')
-rw-r--r--utils/argv_fuzzing/argv_fuzz_demo.c9
-rw-r--r--utils/argv_fuzzing/argv_fuzz_persistent_demo.c23
2 files changed, 30 insertions, 2 deletions
diff --git a/utils/argv_fuzzing/argv_fuzz_demo.c b/utils/argv_fuzzing/argv_fuzz_demo.c
index f4375316..5fe4d704 100644
--- a/utils/argv_fuzzing/argv_fuzz_demo.c
+++ b/utils/argv_fuzzing/argv_fuzz_demo.c
@@ -3,7 +3,14 @@
#include "argv-fuzz-inl.h"
int main(int argc, char **argv) {
-AFL_INIT_ARGV();
+ // Initialize the argv array for use with the AFL (American Fuzzy Lop) tool
+ AFL_INIT_ARGV();
+
+ /* Check the number of command line arguments and
+ compare the values of the first two arguments to specific strings.
+ If the number of arguments is not correct or the values do not match,
+ an error message is printed. If the values do match, the program
+ calls the abort() function. */
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
if (strcmp(argv[2], "TEST2") == 0) {
abort();
diff --git a/utils/argv_fuzzing/argv_fuzz_persistent_demo.c b/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
index 1e96ade1..a96cf1fe 100644
--- a/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
+++ b/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
@@ -1,28 +1,49 @@
+/*
+This file contains a simple fuzzer for testing command line argument parsing
+using persistent mode.
+*/
+
#include <stdio.h>
#include <string.h>
#include "argv-fuzz-inl.h"
__AFL_FUZZ_INIT();
+/* The main function is an entry point for a program.
+ The argc parameter is an integer that indicates the number of arguments
+ passed to the program. The argv parameter is an array of character pointers,
+ with each element pointing to a null-terminated string that represents
+ one of the arguments.
+ */
int main(int argc, char **argv) {
#ifdef __AFL_HAVE_MANUAL_CONTROL
__AFL_INIT();
#endif
unsigned char *buf = __AFL_FUZZ_TESTCASE_BUF;
+ /* __AFL_LOOP() limits the maximum number of iterations before exiting
+ the loop and allowing the program to terminate. It protects against
+ accidental memory leaks and similar issues. */
while (__AFL_LOOP(100000)) {
int len = __AFL_FUZZ_TESTCASE_LEN;
+ // Check that the length of the test case is at least 8 bytes
if (len < 8) continue;
+ // Initialize the command line arguments using the testcase buffer
AFL_INIT_ARGV_PERSISTENT(buf);
+ /* Check if the first argument is "XYZ" and the second argument is "TEST2"
+ If so, call the "abort" function to terminate the program.
+ Otherwise, print an error message. */
if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
if (strcmp(argv[2], "TEST2") == 0) { abort(); }
} else {
printf("Bad number of arguments!\n");
}
}
-
+ /* Exiting the loop allows the program to terminate normally. AFL will restart
+ the process with a clean slate for allocated memory, file descriptors, etc.
+ */
return 0;
} \ No newline at end of file