aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--docs/env_variables.md18
1 files changed, 15 insertions, 3 deletions
diff --git a/docs/env_variables.md b/docs/env_variables.md
index 7ab5351c..76a64bd2 100644
--- a/docs/env_variables.md
+++ b/docs/env_variables.md
@@ -284,12 +284,24 @@ mode.
TMPDIR=$PWD/assembly_here AFL_KEEP_ASSEMBLY=1 make clean all
```
- - GCC_PLUGIN mode only: Setting `AFL_GCC_INSTRUMENT_FILE` with a filename will
- only instrument those files that match the names listed in this file (one
- filename per line). See
+ - GCC_PLUGIN mode only: Setting `AFL_GCC_INSTRUMENT_FILE` or
+ `AFL_GCC_ALLOWLIST` with a filename will only instrument those files
+ that match the names listed in this file (one filename per line).
+
+ Setting `AFL_GCC_DENYLIST` or `AFL_GCC_BLOCKLIST`
+ with a file name and/or function will only skip those files that match
+ the names listed in the specified file. See
[instrumentation/README.instrument_list.md](../instrumentation/README.instrument_list.md)
for more information.
+ Setting `AFL_GCC_OUT_OF_LINE=1` will instruct afl-gcc-fast to instrument the
+ code with calls to an injected subroutine instead of the much more efficient
+ inline instrumentation.
+
+ Setting `AFL_GCC_SKIP_NEVERZERO=1` will not implement the skip zero test.
+ If the target performs only a few loops, then this will give a small
+ performance boost.
+
## 4) Settings for afl-fuzz
The main fuzzer binary accepts several options that disable a couple of sanity