Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-07-12 | check the sync_id length once | William Tan | |
2024-07-12 | Merge pull request #2156 from choller/patch-1 | van Hauser | |
Initialize max_length in afl_fsrv_init #2155 | |||
2024-07-12 | Initialize max_length in afl_fsrv_init #2155 | Christian Holler (:decoder) | |
2024-07-10 | Merge pull request #2154 from hazohelet/fix-missed-alias-table-recreation | van Hauser | |
Fix missed updates of alias table when INTROSPECTION is on | |||
2024-07-10 | Merge pull request #2152 from exoosh/exocad/stable | van Hauser | |
Some fixups to the GNUmakefile.llvm | |||
2024-07-10 | Fix missed updates of alias table when INTROSPECTION is on | Takuya Shimizu | |
In src/afl-fuzz.c `prev_queued_items` is used to decide whether the alias table should be recreated through the comparison with `afl->queued_items`. https://github.com/AFLplusplus/AFLplusplus/blob/43f462c91b3699b66e4aa1c5703b30f5189b5618/src/afl-fuzz.c#L3103-L3117 However, this variable is also updated to `afl->queued_items` when INTROSPECTION is enabled and the `fuzz_one` appends seeds. https://github.com/AFLplusplus/AFLplusplus/blob/43f462c91b3699b66e4aa1c5703b30f5189b5618/src/afl-fuzz.c#L3135-L3140 Due to the update of `prev_queued_items` when INTROSPECTION is on, alias table may not be recreated when it actually should be. This can lead to potential heap buffer-overflow in `select_next_queue_entry` due to the lack of `afl_realloc` called in `create_alias_table`. This patch fixes this bug by utilizing another variable for the INTROSPECTION part like other variables such as `prev_saved_tmouts`. | |||
2024-07-10 | Merge pull request #2138 from meowmeowxw/ijon-set | van Hauser | |
IJON SET | |||
2024-07-10 | ijon set: use __afl_coverage_interesting | Giovanni Di Santi | |
2024-07-10 | Some fixups to the GNUmakefile.llvm | Oliver Schneider | |
* rely less on the shell and more on GNU make to parse the versions * fixed retrieval of minor version (for 18.1.8 it gave 8 instead of 1!) * auto-detection of llvm-config within the supported version range * replaced backticks by `$(...)` syntax * tested against `busybox static-sh`, `bash`, `dash` and `csh` | |||
2024-07-08 | update timeout for custom mutator tests | vanhauser-thc | |
2024-07-08 | Update sample_all.sh (#2146) | Vito | |
Incorrect shell syntax | |||
2024-07-05 | Fixed the syntax errors in `unicorn_loader.py` within `unicorn_mode`. (#2144) | Chenhao | |
Replaced a Chinese comma "," with an English comma "," to ensure the code runs correctly. | |||
2024-07-01 | Merge pull request #2143 from r-barnes/patch-1 | van Hauser | |
Make fallthroughs explicit in afl-fuzz-extras.c | |||
2024-07-01 | Make fallthroughs explicit in afl-fuzz-extras.c | Richard Barnes | |
Using `__attribute__((fallthrough))` makes fallthroughs explicit in a way the compiler can understand. This allows the enablement of `-Wimplicit-fallthrough`. | |||
2024-07-01 | Merge pull request #2142 from CowBoy4mH3LL/patch-2 | van Hauser | |
Update README.md to reflect latest changes | |||
2024-07-01 | Update README.md to reflect latest changes | Subhojeet Mukherjee, PhD | |
1. fixed hook name length to 16 2. no native debug logging at this time -- will bridge with AFL++ macros latter | |||
2024-07-01 | Merge pull request #2141 from AFLplusplus/dev | van Hauser | |
push to stable | |||
2024-07-01 | changelog | vanhauser-thc | |
2024-07-01 | Merge pull request #2140 from CowBoy4mH3LL/dev | van Hauser | |
Adding of QEMU hooking bridge | |||
2024-07-01 | Fresh commit with all -- post revertion due to unicornafl update | Subhojeet Mukherjee, PhD | |
2024-06-30 | ijon set: discard source code instrumentation | Giovanni Di Santi | |
2024-06-29 | ijon set: remove gdb_history | Giovanni Di Santi | |
2024-06-29 | ijon set: init | Giovanni Di Santi | |
2024-06-29 | update qemuafl | vanhauser-thc | |
2024-06-29 | add AFL_OLD_FORKSERVER feature | vanhauser-thc | |
2024-06-29 | todo | vanhauser-thc | |
2024-06-29 | update qemu mode | vanhauser-thc | |
2024-06-28 | code format | vanhauser-thc | |
2024-06-28 | update grammar mutator | vanhauser-thc | |
2024-06-28 | add custom_send_tcp | vanhauser-thc | |
2024-06-27 | add ruby dict | vanhauser-thc | |
2024-06-27 | AFL_CUSTOM_MUTATOR_LATE_SEND added | vanhauser-thc | |
2024-06-27 | Merge pull request #2136 from jakelamberson/enhance-nyx-instructions | van Hauser | |
Enhance Nyx mode instructions | |||
2024-06-26 | Add nyx_mode to contribution instructions | Jake Lamberson | |
2024-06-26 | Fix and enhance Nyx mode instructions | Jake Lamberson | |
2024-06-26 | improved seed selection algorithm | vanhauser-thc | |
2024-06-24 | Merge pull request #2133 from visitorckw/optimize-bit-counting | van Hauser | |
Optimize bit counting using __builtin_popcount | |||
2024-06-24 | Optimize bit counting using __builtin_popcount | Kuan-Wei Chiu | |
Use the __builtin_popcount intrinsic to optimize the bit counting function if the compiler supports it. This change replaces the manual bit counting algorithm with the more efficient built-in function, which leverages hardware support on compatible processors. This modification ensures that the code remains backward-compatible by falling back to the original implementation when __builtin_popcount is not available. | |||
2024-06-22 | nits atnwalk | vanhauser-thc | |
2024-06-21 | add zlib compression for fast resume | vanhauser-thc | |
2024-06-21 | Merge pull request #2132 from tylzh97/stable | van Hauser | |
Fix typo in unicorn_mode | |||
2024-06-21 | Fix typo in unicorn_mode | Chenhao | |
in `unicorn_mode/samples`, python example floder's name is `python_simple`, there is a typo in README file. | |||
2024-06-20 | nit | vanhauser-thc | |
2024-06-20 | todos | vanhauser-thc | |
2024-06-20 | Merge pull request #2130 from killerra/dev | van Hauser | |
Auto disable memory limits for FASAN | |||
2024-06-20 | Auto disable memory limits for FASAN | killerra | |
2024-06-19 | Merge pull request #2129 from choller/persist-code-cov | van Hauser | |
Collect persistent coverage data and dump it at the end of the run | |||
2024-06-19 | Collect persistent coverage data and dump it at the end of the run | Christian Holler (:decoder) | |
With CODE_COVERAGE builds, we need to collect the coverage data of each iteration in a persistant buffer that has the same size as the regular trace buffer used for fuzzing. We dump this information at the end of the run and when combined with pointer data and module info, this can be used to calculate code coverage. | |||
2024-06-18 | code format and changelog | vanhauser-thc | |
2024-06-18 | Merge pull request #2128 from AFLplusplus/fastrestart | van Hauser | |
Fastrestart |