From a949b40d11956f34c51f4546412a73e0400d1ffc Mon Sep 17 00:00:00 2001 From: Khaled Yakdan Date: Sat, 27 Jul 2019 01:18:30 +0200 Subject: Only execute the mutated input when it is not empty --- afl-fuzz.c | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) (limited to 'afl-fuzz.c') diff --git a/afl-fuzz.c b/afl-fuzz.c index 35f1af7f..42970e39 100644 --- a/afl-fuzz.c +++ b/afl-fuzz.c @@ -5581,10 +5581,12 @@ static u8 fuzz_one(char** argv) { for (stage_cur = 0 ; stage_cur < stage_max ; stage_cur++) { size_t orig_size = (size_t) len; size_t mutated_size = custom_mutator(out_buf, orig_size, mutated_buf, max_seed_size, UR(UINT32_MAX)); - out_buf = ck_realloc(out_buf, mutated_size); - memcpy(out_buf, mutated_buf, mutated_size); - if (common_fuzz_stuff(argv, out_buf, (u32)mutated_size)) { - goto abandon_entry; + if (mutated_size > 0) { + out_buf = ck_realloc(out_buf, mutated_size); + memcpy(out_buf, mutated_buf, mutated_size); + if (common_fuzz_stuff(argv, out_buf, (u32) mutated_size)) { + goto abandon_entry; + } } } -- cgit 1.4.1