about summary refs log tree commit diff
path: root/utils/argv_fuzzing
diff options
context:
space:
mode:
authorMaciej Domanski <maciej.domanski@trailofbits.com>2022-12-27 16:15:52 +0100
committerMaciej Domanski <maciej.domanski@trailofbits.com>2022-12-27 16:15:52 +0100
commit3d031f93a6366ee157cfd9a27fbb6d485d328d8e (patch)
tree7c70b8e6dd57cdcc5844cb5219306e3a3e884400 /utils/argv_fuzzing
parent3a134edd889ed1bf4f8d11e8e37ebba31460fb3e (diff)
downloadafl++-3d031f93a6366ee157cfd9a27fbb6d485d328d8e.tar.gz
update
Diffstat (limited to 'utils/argv_fuzzing')
-rw-r--r--utils/argv_fuzzing/argv_fuzz_demo.c9
-rw-r--r--utils/argv_fuzzing/argv_fuzz_persistent_demo.c23
2 files changed, 30 insertions, 2 deletions
diff --git a/utils/argv_fuzzing/argv_fuzz_demo.c b/utils/argv_fuzzing/argv_fuzz_demo.c
index f4375316..5fe4d704 100644
--- a/utils/argv_fuzzing/argv_fuzz_demo.c
+++ b/utils/argv_fuzzing/argv_fuzz_demo.c
@@ -3,7 +3,14 @@
 #include "argv-fuzz-inl.h"
 
 int main(int argc, char **argv) {
-AFL_INIT_ARGV();
+  // Initialize the argv array for use with the AFL (American Fuzzy Lop) tool
+  AFL_INIT_ARGV();
+
+  /* Check the number of command line arguments and
+    compare the values of the first two arguments to specific strings.
+    If the number of arguments is not correct or the values do not match,
+    an error message is printed. If the values do match, the program
+    calls the abort() function. */
   if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
     if (strcmp(argv[2], "TEST2") == 0) {
       abort();
diff --git a/utils/argv_fuzzing/argv_fuzz_persistent_demo.c b/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
index 1e96ade1..a96cf1fe 100644
--- a/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
+++ b/utils/argv_fuzzing/argv_fuzz_persistent_demo.c
@@ -1,28 +1,49 @@
+/*
+This file contains a simple fuzzer for testing command line argument parsing
+using persistent mode.
+*/
+
 #include <stdio.h>
 #include <string.h>
 #include "argv-fuzz-inl.h"
 
 __AFL_FUZZ_INIT();
 
+/* The main function is an entry point for a program.
+   The argc parameter is an integer that indicates the number of arguments
+   passed to the program. The argv parameter is an array of character pointers,
+   with each element pointing to a null-terminated string that represents
+   one of the arguments.
+ */
 int main(int argc, char **argv) {
 #ifdef __AFL_HAVE_MANUAL_CONTROL
   __AFL_INIT();
 #endif
   unsigned char *buf = __AFL_FUZZ_TESTCASE_BUF;
 
+  /* __AFL_LOOP() limits the maximum number of iterations before exiting
+     the loop and allowing the program to terminate. It protects against
+     accidental memory leaks and similar issues. */
   while (__AFL_LOOP(100000)) {
     int len = __AFL_FUZZ_TESTCASE_LEN;
 
+    // Check that the length of the test case is at least 8 bytes
     if (len < 8) continue;
 
+    // Initialize the command line arguments using the testcase buffer
     AFL_INIT_ARGV_PERSISTENT(buf);
 
+    /* Check if the first argument is "XYZ" and the second argument is "TEST2"
+       If so, call the "abort" function to terminate the program.
+       Otherwise, print an error message. */
     if (argc > 1 && strcmp(argv[1], "XYZ") == 0) {
       if (strcmp(argv[2], "TEST2") == 0) { abort(); }
     } else {
       printf("Bad number of arguments!\n");
     }
   }
-
+  /* Exiting the loop allows the program to terminate normally. AFL will restart
+     the process with a clean slate for allocated memory, file descriptors, etc.
+  */
   return 0;
 }
\ No newline at end of file