Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-06-25 | updated unicornafl | Dominik Maier | |
2020-06-25 | remove radamsa, add radamsa custom mutator | van Hauser | |
2020-06-25 | Merge pull request #425 from dgmelski/fix-recalibration | Andrea Fioraldi | |
Fix saturated maps & stability cliff in recalibration | |||
2020-06-25 | GNUmakefile: warn about '.' being first path in PATH environment variable. ↵ | hexcoder- | |
This causes recursion in 'as'. (seen in Haiku) | |||
2020-06-25 | add seek power schedule, remove update stats in calibration, fix help output | van Hauser | |
2020-06-25 | fix plot | van Hauser | |
2020-06-24 | Fix saturated maps & stability cliff in recalibration | David Melski | |
I have observed two problems: 1. A sudden "stability cliff" where stability drops precipitously. 2. A sudden jump to a 100% saturated "density map". Both issues are due to attempted "recalibration" of a case at the beginning of fuzz_one_original() or mopt_common_fuzzing(). See the comments "CALIBRATION (only if failed earlier on)" in those functions and the subsequent call to calibrate_case(). At those calls to calibrate_case(), afl->fsrv.trace_bits holds trace_bits for a run of the SUT on a prior queue entry. However, calibrate_case() may use the trace_bits as if they apply to the current queue entry (afl->queue_cur). Most often this bug causes the "stability cliff". Trace bits are compared for runs on distinct inputs, which can be very different. The result is a sudden drop in stability. Sometimes it leads to the "saturated map" problem. A saturated density map arises if the trace bits on the previous entry were "simplified" by simplify_trace(). Simplified traces only contain the values 1 and 128. They are meant to be compared against virgin_crashes and virgin_tmouts. However, this bug causes the (stale) simplified trace to be compared against virgin_bits during a call to has_new_bits(), which causes every byte in vigin_bits to be something other than 255. The overall map density is determined by the percentage of bytes not 255, which will be 100%. Worse, AFL++ will be unable to detect novel occurrences of edge counts 1 and 128 going forward. This patch avoids the above issues by clearing q->exec_cksum when calibration fails. Recalibrations are forced to start with a fresh trace on the queue entry. Thanks to @andreafioraldi for suggesting the current, improved patch. | |||
2020-06-24 | decrease time to sync for main | van Hauser | |
2020-06-24 | update .gitignore | van Hauser | |
2020-06-24 | add -D option for -S | van Hauser | |
2020-06-24 | create .synced/NAMES.last to document last sync attempts | van Hauser | |
2020-06-24 | gitignore | van Hauser | |
2020-06-23 | lto whitelist in test.sh | van Hauser | |
2020-06-23 | fix test.sh | van Hauser | |
2020-06-23 | fix make files | van Hauser | |
2020-06-23 | fix gcc mode for travis | van Hauser | |
2020-06-23 | fix gcc makefile | van Hauser | |
2020-06-23 | fix gcc makefile | van Hauser | |
2020-06-23 | Merge branch 'dev' of github.com:vanhauser-thc/AFLplusplus into dev | Dominik Maier | |
2020-06-23 | Merge pull request #422 from devnexen/haiku__build_upd | Dominik Maier | |
Haiku build upd | |||
2020-06-23 | Libdislocator Haiku build fix | David Carlier | |
2020-06-23 | libtokencap Haiku support | David Carlier | |
2020-06-22 | Added rand, hash unittests | Dominik Maier | |
2020-06-22 | old compiler fix | van Hauser | |
2020-06-22 | shmem support for afl-tmin and afl-showmap | van Hauser | |
2020-06-22 | further refinement | van Hauser | |
2020-06-22 | fix afl-cmin.bash | aflpp | |
2020-06-22 | allow /tmp | van Hauser | |
2020-06-21 | fix unicorn mode for CFLAGS | van Hauser | |
2020-06-21 | fix libcompcov for CFLAGS | van Hauser | |
2020-06-21 | remove -Werror and add include for libdislocator | van Hauser | |
2020-06-21 | fix for s=0 | van Hauser | |
2020-06-21 | fix for -s 0 | van Hauser | |
2020-06-20 | fix libradamsa see issue #419 | hexcoder- | |
2020-06-20 | Merge pull request #418 from jonasmollerlarsen/dev | van Hauser | |
Fix when env. PATH contains spaces | |||
2020-06-20 | afl-plot: fix issue #417, also check relative paths for directories | hexcoder- | |
2020-06-20 | Fix when env. PATH contains spaces | jonasmollerlarsen | |
2020-06-20 | modify txt configs for test | van Hauser | |
2020-06-20 | fix ascii percentage calc | van Hauser | |
2020-06-20 | fix ascii percentage calc | van Hauser | |
2020-06-19 | first commit, looks good | van Hauser | |
2020-06-19 | fix afl-clang-fast for default pcguard mode | van Hauser | |
2020-06-18 | update todo | van Hauser | |
2020-06-18 | update todo | van Hauser | |
2020-06-18 | Merge pull request #416 from Mem2019/patch-2 | van Hauser | |
`fault == afl->crash_mode` should be likely | |||
2020-06-18 | `fault == afl->crash_mode` should be likely | 2019 | |
Since during normal fuzzing, crash_mode is FSRV_RUN_OK, and fault is also usually FSRV_RUN_OK since most executions are valid executions, thus it should be likely instead of unlikely | |||
2020-06-17 | work around for llvm 11 bug | van Hauser | |
2020-06-17 | fix displayed schedule | van Hauser | |
2020-06-16 | unit tests: fix stupid compiler warning for gcc 4.8.4 | hexcoder- | |
2020-06-16 | fix unit tests when exit is called at the end | hexcoder- | |