about summary refs log tree commit diff
AgeCommit message (Collapse)Author
2024-10-07Merge pull request #2217 from carlocab/macos-flagsvan Hauser
Update macOS linker flags in GNUmakefile.llvm
2024-10-07Merge pull request #2218 from ea/stablevan Hauser
Fix uninitialized alloc_canary in libdislocator
2024-10-02Fix uninitialized alloc_canary in libdislocator ea
When random alloc_canary env var option was introduced, a possibility for use of uninitialized alloc_canary value was made. In most cases, constructor will be called during shared library load and the alloc_canary would be initialized to either its default value or a randomly generated one if forced by AFL_RANDOM_ALLOC_CANARY env var. However, in some cases, libraries loaded before libdislocator will make allocations (still using libdislocator's allocation functions) while alloc_canary is still uninitialized. In such cases, canary value is usually NULL. If such allocated value is then free()'d after libdislocator's constructor has been run, call to free() will fail causing a false positive. This condition usually happens while calling library destructors at process termination. The patch ensures the canary value is initialized in all cases, and introduces a destructor that reverts it to default value. This does mean that certain number of early allocations will use the default canary value rather than the random one set afterwards. This seems like a reasonable tradeoff as I haven't found a surefire way of forcing libdislocator's constructor to run first in all possible cases (if nothing else, libphtread usually has priority).
2024-10-02Update macOS linker flags in GNUmakefile.llvmCarlo Cabrera
`-flat_namespace` is effectively deprecated and doesn't really work as expected these days. Omitting the `-flat_namespace` means that binaries are built with a two-level namespace, which don't support `-undefined suppress`. The idiomatic way of telling the linker to look up undefined symbols at runtime is using `-undefined dynamic_lookup`, which is supported by a two-level namespace. See also: ocaml/ocaml#10723 mono/mono#21257
2024-10-01persistent record for frida and qmeuvanhauser-thc
2024-09-29llvm20 fixvanhauser-thc
2024-09-27fix fixvanhauser-thc
2024-09-26fix postprocess for calibrationvanhauser-thc
2024-09-24Merge pull request #2214 from AFLplusplus/devvan Hauser
push to stable
2024-09-242nd macos ci attemptvanhauser-thc
2024-09-24update qemuaflvanhauser-thc
2024-09-24try macos civanhauser-thc
2024-09-23Fix macOS buildDominik Maier
2024-09-23Merge pull request #2212 from nj00001/devvan Hauser
Save crash log returned by nyx when AFL_CRASHING_SEEDS_AS_NEW_CRASH e…
2024-09-23Save crash log returned by nyx when AFL_CRASHING_SEEDS_AS_NEW_CRASH ↵nj00001
environment variable is enabled nyx also returns a crash log when reporting a crash, both files are saved in the afl++ fuzzing run, whereas with the AFL_CRASHING_SEEDS_AS_NEW_CRASH setting, only the crash file is saved in the dry run phase if crashes are included in the supplied seeds. This commit adds crash log saving to keep the behavior consistent
2024-09-16Update fuzzing_in_depth.md for a typo (#2209)Seyed Behnam Andarzian
2024-09-14Merge pull request #2207 from schumilo/devvan Hauser
fix AFL_AUTORESUME=1 for Nyx mode
2024-09-14Merge pull request #2208 from 20urc3/patch-1van Hauser
Update COMPARISON.md
2024-09-14Update COMPARISON.md20urc3
- Add Ampere Altra Q80-30 benchmark
2024-09-14fix AFL_AUTORESUME=1 for Nyx modeSergej Schumilo
2024-09-12Merge pull request #2206 from smoelius/afl-sha1-filenames-testvan Hauser
Add `AFL_SHA1_FILENAMES` test
2024-09-12Adjust cmplog test to use `AFL_SHA1_FILENAMES=1`Samuel Moelius
2024-09-12nitsvanhauser-thc
2024-09-09Merge pull request #2205 from ktpss95112/patch-1van Hauser
Update env_variables.md
2024-09-09Update env_variables.mdChi-Feng Tsai
2024-09-06Fix broken link in CONTRIBUTING.md (#2196)intrigus-lgtm
* Fix broken link in CONTRIBUTING.md * Also change link text
2024-09-06update qemu persisten readmevanhauser-thc
2024-09-06update qemu persisten readmevanhauser-thc
2024-09-06Merge pull request #2204 from AFLplusplus/devvan Hauser
push to stable
2024-09-06Merge pull request #2203 from ktpss95112/patch-1van Hauser
Update the doc string of read_foreign_testcases()
2024-09-06Merge pull request #2202 from smoelius/permissive_create-in-mark_as_variablevan Hauser
Use `permissive_create` in `mark_as_variable`
2024-09-06Update the doc string of read_foreign_testcases()Chi-Feng Tsai
2024-09-05Use `permissive_create` in `mark_as_variable`Samuel Moelius
2024-09-04already support LLVMFuzzerCleanupvanhauser-thc
2024-08-29enhance autotokens standalonevanhauser-thc
2024-08-28add autotokens-standalonevanhauser-thc
2024-08-28improve aflpp-standalonevanhauser-thc
2024-08-22Merge pull request #2195 from intrigus-lgtm/patch-4van Hauser
Install package without asking for confirmation
2024-08-22Merge pull request #2193 from ncoghlan/core-dump-notice-rewordingvan Hauser
Offer more explicit core dump handling tip
2024-08-21Install package without asking for confirmationintrigus-lgtm
2024-08-21No longer need the extra line breakAlyssa Coghlan
2024-08-21Skip the save/restore exampleAlyssa Coghlan
2024-08-21Wording tweaksAlyssa Coghlan
2024-08-21Offer more explicit core dump handling tipAlyssa Coghlan
2024-08-20Merge pull request #2192 from AFLplusplus/devvan Hauser
fix unicorn build
2024-08-20fix unicorn buildvanhauser-thc
2024-08-19Merge pull request #2190 from AFLplusplus/devvan Hauser
push to stable
2024-08-19code format, llvm 18vanhauser-thc
2024-08-18fix AFL_OLD_FORKSERVERvanhauser-thc
2024-08-16fix custom post process with custom sendvanhauser-thc