Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-07-14 | added frida gum extension | van Hauser | |
2020-07-09 | illumos littlefixes: little typo for cpu binding and | David Carlier | |
even tough gcc plugin less good than LLVM, clang is more buggy on this os. | |||
2020-07-08 | eliminate race condition for cpu affinity on -M/-S | van Hauser | |
2020-07-06 | warn rather than fail if AFL_MAP_SIZE is set and not understood by instrumenter | van Hauser | |
2020-07-06 | warn rather than fail if AFL_MAP_SIZE is set and not understood by instrumenter | van Hauser | |
2020-07-03 | ubsan options | Andrea Fioraldi | |
2020-07-01 | warn on deprecated env vars | van Hauser | |
2020-07-01 | because github errors reput typo fix | van Hauser | |
2020-06-30 | Big renaming (#429) | van Hauser | |
* first commit, looks good * fix ascii percentage calc * fix ascii percentage calc * modify txt configs for test * further refinement * Revert "Merge branch 'text_inputs' into dev" This reverts commit 6d9b29daca46c8912aa9ddf6c053bc8554e9e9f7, reversing changes made to 07648f75ea5ef8f03a92db0c7566da8c229dc27b. * blacklist -> ignore renaming * rename whitelist -> instrumentlist * reduce the time interval in which the secondaries sync Co-authored-by: root <root@localhost.localdomain> | |||
2020-06-29 | workaround for recent afl++ versions | van Hauser | |
2020-06-29 | fix autodict | van Hauser | |
2020-06-28 | less problematic definitions | van Hauser | |
2020-06-28 | less problematic definitions | van Hauser | |
2020-06-28 | debug code | van Hauser | |
2020-06-28 | fix output for LTOinstrim | van Hauser | |
2020-06-27 | fix typos | van Hauser | |
2020-06-27 | afl-sharedmem.c: fix leaks on error paths (SysV shared memory) | hexcoder- | |
2020-06-26 | original fix for calibration error | Andrea Fioraldi | |
2020-06-26 | implement sharedmem mmap for cmplog | van Hauser | |
2020-06-26 | fix shared memory leaks in afl-showmap, initialize cmplog_mode | hexcoder- | |
2020-06-25 | fix for schedules | van Hauser | |
2020-06-25 | shmem release fix | van Hauser | |
2020-06-25 | make llvm_mode pcguard instrumentation collision free | van Hauser | |
2020-06-25 | initialized variable | Dominik Maier | |
2020-06-25 | remove radamsa, add radamsa custom mutator | van Hauser | |
2020-06-25 | Merge pull request #425 from dgmelski/fix-recalibration | Andrea Fioraldi | |
Fix saturated maps & stability cliff in recalibration | |||
2020-06-25 | add seek power schedule, remove update stats in calibration, fix help output | van Hauser | |
2020-06-25 | fix plot | van Hauser | |
2020-06-24 | Fix saturated maps & stability cliff in recalibration | David Melski | |
I have observed two problems: 1. A sudden "stability cliff" where stability drops precipitously. 2. A sudden jump to a 100% saturated "density map". Both issues are due to attempted "recalibration" of a case at the beginning of fuzz_one_original() or mopt_common_fuzzing(). See the comments "CALIBRATION (only if failed earlier on)" in those functions and the subsequent call to calibrate_case(). At those calls to calibrate_case(), afl->fsrv.trace_bits holds trace_bits for a run of the SUT on a prior queue entry. However, calibrate_case() may use the trace_bits as if they apply to the current queue entry (afl->queue_cur). Most often this bug causes the "stability cliff". Trace bits are compared for runs on distinct inputs, which can be very different. The result is a sudden drop in stability. Sometimes it leads to the "saturated map" problem. A saturated density map arises if the trace bits on the previous entry were "simplified" by simplify_trace(). Simplified traces only contain the values 1 and 128. They are meant to be compared against virgin_crashes and virgin_tmouts. However, this bug causes the (stale) simplified trace to be compared against virgin_bits during a call to has_new_bits(), which causes every byte in vigin_bits to be something other than 255. The overall map density is determined by the percentage of bytes not 255, which will be 100%. Worse, AFL++ will be unable to detect novel occurrences of edge counts 1 and 128 going forward. This patch avoids the above issues by clearing q->exec_cksum when calibration fails. Recalibrations are forced to start with a fresh trace on the queue entry. Thanks to @andreafioraldi for suggesting the current, improved patch. | |||
2020-06-24 | decrease time to sync for main | van Hauser | |
2020-06-24 | add -D option for -S | van Hauser | |
2020-06-24 | create .synced/NAMES.last to document last sync attempts | van Hauser | |
2020-06-23 | lto whitelist in test.sh | van Hauser | |
2020-06-22 | Added rand, hash unittests | Dominik Maier | |
2020-06-22 | old compiler fix | van Hauser | |
2020-06-22 | shmem support for afl-tmin and afl-showmap | van Hauser | |
2020-06-22 | fix afl-cmin.bash | aflpp | |
2020-06-22 | allow /tmp | van Hauser | |
2020-06-21 | fix unicorn mode for CFLAGS | van Hauser | |
2020-06-21 | fix for s=0 | van Hauser | |
2020-06-21 | fix for -s 0 | van Hauser | |
2020-06-20 | fix libradamsa see issue #419 | hexcoder- | |
2020-06-18 | `fault == afl->crash_mode` should be likely | 2019 | |
Since during normal fuzzing, crash_mode is FSRV_RUN_OK, and fault is also usually FSRV_RUN_OK since most executions are valid executions, thus it should be likely instead of unlikely | |||
2020-06-17 | fix displayed schedule | van Hauser | |
2020-06-16 | fix for *BSD: remove all HAVE_ARC4RANDOM dependencies | hexcoder- | |
2020-06-15 | code format | Dominik Maier | |
2020-06-15 | using XX64 for 32 bit hash | Dominik Maier | |
2020-06-15 | tidied hash32, unicorn | Dominik Maier | |
2020-06-15 | switched to new MOpt dictionary support | van Hauser | |
2020-06-15 | improve performance for default power schedule | van Hauser | |