Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-07-01 | comments fix | hexcoder | |
2020-07-01 | fix text | hexcoder | |
2020-07-01 | restore credit for afl-tmin fork server patch | hexcoder | |
2020-07-01 | comments fix | hexcoder | |
2020-07-01 | comments fixed | hexcoder | |
2020-07-01 | text fix | hexcoder | |
2020-07-01 | renaming remains fixed | hexcoder | |
2020-06-30 | reduce the time interval in which the secondaries sync | van Hauser | |
2020-06-30 | rename whitelist -> instrumentlist | van Hauser | |
2020-06-30 | blacklist -> ignore renaming | van Hauser | |
2020-06-29 | Revert "Merge branch 'text_inputs' into dev" | root | |
This reverts commit 6d9b29daca46c8912aa9ddf6c053bc8554e9e9f7, reversing changes made to 07648f75ea5ef8f03a92db0c7566da8c229dc27b. | |||
2020-06-29 | Merge branch 'text_inputs' into dev | van Hauser | |
2020-06-29 | workaround for recent afl++ versions | van Hauser | |
2020-06-29 | fix unittest | van Hauser | |
2020-06-29 | fix autodict | van Hauser | |
2020-06-29 | fix for shmem+autodict | van Hauser | |
2020-06-28 | less problematic definitions | van Hauser | |
2020-06-28 | less problematic definitions | van Hauser | |
2020-06-28 | debug code | van Hauser | |
2020-06-28 | typo aonce -> once | hexcoder | |
2020-06-28 | O2 instead of O3 for .o target files | van Hauser | |
2020-06-28 | update idea list | van Hauser | |
2020-06-28 | update schedules in readme | van Hauser | |
2020-06-28 | fix output for LTOinstrim | van Hauser | |
2020-06-27 | fix make static | van Hauser | |
2020-06-27 | fix typos | van Hauser | |
2020-06-27 | afl-sharedmem.c: fix leaks on error paths (SysV shared memory) | hexcoder- | |
2020-06-26 | original fix for calibration error | Andrea Fioraldi | |
2020-06-26 | afl-plot remove error print | van Hauser | |
2020-06-26 | implement sharedmem mmap for cmplog | van Hauser | |
2020-06-26 | fix shared memory leaks in afl-showmap, initialize cmplog_mode | hexcoder- | |
2020-06-25 | fix for schedules | van Hauser | |
2020-06-25 | remove debug | van Hauser | |
2020-06-25 | shmem release fix | van Hauser | |
2020-06-25 | make llvm_mode pcguard instrumentation collision free | van Hauser | |
2020-06-25 | fix makefile | van Hauser | |
2020-06-25 | initialized variable | Dominik Maier | |
2020-06-25 | updated unicornafl | Dominik Maier | |
2020-06-25 | remove radamsa, add radamsa custom mutator | van Hauser | |
2020-06-25 | Merge pull request #425 from dgmelski/fix-recalibration | Andrea Fioraldi | |
Fix saturated maps & stability cliff in recalibration | |||
2020-06-25 | GNUmakefile: warn about '.' being first path in PATH environment variable. ↵ | hexcoder- | |
This causes recursion in 'as'. (seen in Haiku) | |||
2020-06-25 | add seek power schedule, remove update stats in calibration, fix help output | van Hauser | |
2020-06-25 | fix plot | van Hauser | |
2020-06-24 | Fix saturated maps & stability cliff in recalibration | David Melski | |
I have observed two problems: 1. A sudden "stability cliff" where stability drops precipitously. 2. A sudden jump to a 100% saturated "density map". Both issues are due to attempted "recalibration" of a case at the beginning of fuzz_one_original() or mopt_common_fuzzing(). See the comments "CALIBRATION (only if failed earlier on)" in those functions and the subsequent call to calibrate_case(). At those calls to calibrate_case(), afl->fsrv.trace_bits holds trace_bits for a run of the SUT on a prior queue entry. However, calibrate_case() may use the trace_bits as if they apply to the current queue entry (afl->queue_cur). Most often this bug causes the "stability cliff". Trace bits are compared for runs on distinct inputs, which can be very different. The result is a sudden drop in stability. Sometimes it leads to the "saturated map" problem. A saturated density map arises if the trace bits on the previous entry were "simplified" by simplify_trace(). Simplified traces only contain the values 1 and 128. They are meant to be compared against virgin_crashes and virgin_tmouts. However, this bug causes the (stale) simplified trace to be compared against virgin_bits during a call to has_new_bits(), which causes every byte in vigin_bits to be something other than 255. The overall map density is determined by the percentage of bytes not 255, which will be 100%. Worse, AFL++ will be unable to detect novel occurrences of edge counts 1 and 128 going forward. This patch avoids the above issues by clearing q->exec_cksum when calibration fails. Recalibrations are forced to start with a fresh trace on the queue entry. Thanks to @andreafioraldi for suggesting the current, improved patch. | |||
2020-06-24 | decrease time to sync for main | van Hauser | |
2020-06-24 | update .gitignore | van Hauser | |
2020-06-24 | add -D option for -S | van Hauser | |
2020-06-24 | create .synced/NAMES.last to document last sync attempts | van Hauser | |
2020-06-24 | gitignore | van Hauser | |
2020-06-23 | lto whitelist in test.sh | van Hauser | |