aboutsummaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/Changelog.md1
-rw-r--r--docs/env_variables.md6
2 files changed, 5 insertions, 2 deletions
diff --git a/docs/Changelog.md b/docs/Changelog.md
index cae99681..8c0624b6 100644
--- a/docs/Changelog.md
+++ b/docs/Changelog.md
@@ -20,6 +20,7 @@ sending a mail to <afl-users+subscribe@googlegroups.com>.
address for the shared memory map is used as this increases the
fuzzing speed
- fixes to LTO mode if instrumented edges > MAP_SIZE
+ - CTX and NGRAM can now be used together
- added AFL_LLVM_SKIP_NEVERZERO to skip the never zero coverage counter
implmentation. For targets with little or no loops or heavy called
functions. Gives a small performance boost.
diff --git a/docs/env_variables.md b/docs/env_variables.md
index bdbb8520..ab5808ec 100644
--- a/docs/env_variables.md
+++ b/docs/env_variables.md
@@ -97,12 +97,14 @@ Then there are a few specific features that are only available in llvm_mode:
- AFL_LLVM_INSTRUMENT - this configures the instrumentation mode.
Available options:
- DEFAULT - classic AFL (map[cur_loc ^ prev_loc >> 1]++)
+ CLASSIC - classic AFL (map[cur_loc ^ prev_loc >> 1]++) (default)
CFG - InsTrim instrumentation (see below)
LTO - LTO instrumentation (see below)
CTX - context sensitive instrumentation (see below)
NGRAM-x - deeper previous location coverage (from NGRAM-2 up to NGRAM-16)
- Only one can be used.
+ In CLASSIC (default) can can also specify CTX and/nor NGRAM, seperate
+ the options with a comma "," then, e.g.:
+ AFL_LLVM_INSTRUMENT=CLASSIC,CTX,NGRAM-4
### LTO