Enhancement on Deterministic stage #1972

kdsjZh · 2024-01-28T10:21:07Z

Hi,

We enhance the AFL++'s capability by implementing selective deterministic mutation. To enable this module, just run without -d or use -D.

Evaluation against AFL++ on fuzzbench can be found at https://fuzzbench.com/reports/experimental/2024-01-24-aflpp-sk2/index.html. (aflplusplus_sk is our implementation. Note that one program didn't build successfully; the aflpp cached the previous results while sk didn't have that cache.)

@vanhauser-thc :)

src/afl-skip-log.cc

src/afl-skipdet.c

src/afl-fuzz-one.c

GNUmakefile

vanhauser-thc · 2024-01-28T13:35:43Z

I left a few nits and questions :) thanks!

vanhauser-thc · 2024-01-28T13:36:21Z

Also please make sure that the code compiles:

src/afl-fuzz-one.c:573:7: warning: implicit declaration of function ‘likeyly’; did you mean ‘likely’? [-Wimplicit-function-declaration]
  573 |   if (likeyly(afl->skip_deterministic) || likely(afl->queue_cur->passed_det) ||
      |       ^~~~~~~
      |       likely

src/afl-skipdet.c

GNUmakefile

domenukk · 2024-01-28T14:48:08Z

src/afl-fuzz-state.c

@@ -102,7 +102,7 @@ void afl_state_init(afl_state_t *afl, uint32_t map_size) {
  afl->stats_update_freq = 1;
  afl->stats_file_update_freq_msecs = STATS_UPDATE_SEC * 1000;
  afl->stats_avg_exec = 0;
-  afl->skip_deterministic = 1;


So this changes the default to not skip deterministic stage? (Why) is this a good idea? If so, we need to update docs, right?

this is what this PR is about. it is a new approach and makes afl++ slightly better. yes the documentation then needs to be updated.

We replace the original deterministic stage to skipdet, which only do much less deterministic mutation. Therefore, this change means we use skipdet by default and original havoc only if -d is set. The vanilla deterministic stage is removed. If you think that make sense I can add the vanilla deterministic stage option back again

This is an evaluation we ran on fuzzbench. skipdet (aflplusplus_sk) show some improvement over AFL++ so I open this PR. https://fuzzbench.com/reports/experimental/2024-01-24-aflpp-sk2/index.html.

GNUmakefile

vanhauser-thc · 2024-01-28T15:35:34Z

you still have to do this:

you have to add afl-fuzz-skipdet.c to AFL_FUZZ_FILES in GNUmakefile

also note that the CI will always fail because of the determinstic change. I will take care of that and doc update after merging

kdsjZh · 2024-01-28T15:35:42Z

The custom mutator and python mutator is only compatible with havoc only. Could we ignore this check? If we set -d flag, it can work in origin havoc mode

Ok, thanks

kdsjZh · 2024-01-28T15:38:15Z

you have to add afl-fuzz-skipdet.c to AFL_FUZZ_FILES in GNUmakefile

As I understand, the GNUmakefile will scan the afl-fuzz*.c automatically, so it should work without any modification. And it work in my local build.

AFL_FUZZ_FILES = $(wildcard src/afl-fuzz*.c)

vanhauser-thc · 2024-01-28T15:40:33Z

you have to add afl-fuzz-skipdet.c to AFL_FUZZ_FILES in GNUmakefile

As I understand, the GNUmakefile will scan the afl-fuzz*.c automatically, so it should work without any modification. And it work in my local build.

AFL_FUZZ_FILES = $(wildcard src/afl-fuzz*.c)

oh right!! and I was surprised that the compilation in the CI did not fail :)
well we have lots of magic and I often forget that it is there :)

vanhauser-thc · 2024-01-28T15:51:23Z

to ensure everything is working as it should I just started another fuzzbench run, will pop up in a few hours at
https://www.fuzzbench.com/reports/experimental/2024-01-28-aflpp-sk/index.html

kdsjZh · 2024-01-28T16:03:46Z

BTW, I found that the aflplusplus_sk's fuzzbench setting didn't have any additional flag, this may let aflpp_sk run as aflpp havoc only.

aflpp inherits ```run_afl_fuzz `` from afl, in which afl will add the -d flag. So you may want to add `-D` in additional flags to enable skipdet module.

In my local build the aflpp_sk configure do havoc only. let me try if -D work.

kdsjZh · 2024-01-28T16:08:26Z

well, the afl will only remove -d if given -M/-S.

    if not additional_flags or check_skip_det_compatible(additional_flags):
        command.append('-d')

Then the easiest way is to change -d to skipdet and -D to enforce old havoc. This may confuse the user a bit given the swap. If you want to keep the existing setting, you may need to include another modified run_afl_fuzz in aflpp fuzzer.py

vanhauser-thc · 2024-01-28T21:55:25Z

Can you modify the source so -d does nothing?

kdsjZh · 2024-01-29T07:22:19Z

let me do a local test first and I'll let you know

kdsjZh · 2024-01-29T07:47:38Z

I locally tested a fuzzbench build; now it should work with the current configuration.

domenukk · 2024-01-29T13:38:16Z

Now CI breaks with

[+] NOTE: AFL++ >= v3 has changed defaults and behaviours - see README.md
[-] PROGRAM ABORT : Using -D determinstic fuzzing is incompatible with AFL_CUSTOM_MUTATOR_ONLY!
         Location : main(), src/afl-fuzz.c:1429

kdsjZh · 2024-01-29T13:46:07Z

This is an intended behavior. IMO running the custom mutation test with -D option can solve. Marc might help with that.

also note that the CI will always fail because of the determinstic change. I will take care of that and doc update after merging

domenukk · 2024-01-29T14:29:25Z

If custom mutators now need an extra flag it means we'll break people's workflows.
Should we always disable deterministic when a custom mutator is provided?

kdsjZh · 2024-01-29T14:40:06Z

Thanks for head up, that make sense! I've disabled the det flag when there is the custom mutator env.

vanhauser-thc · 2024-01-29T16:33:02Z

As I said I will handle it when I merge it
@domenukk @kdsjZh

* Output afl-clang-fast stuffs only if necessary (#1912) * afl-cc header * afl-cc common declarations - Add afl-cc-state.c - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c - Use debugf_args in main - Modify execvp stuffs to fit new aflcc struct * afl-cc show usage * afl-cc mode selecting 1. compiler_mode by callname in argv[0] 2. compiler_mode by env "AFL_CC_COMPILER" 3. compiler_mode/instrument_mode by command line options "--afl-..." 4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT" 5. final checking steps 6. print "... - mode: %s-%s\n" 7. determine real argv[0] according to compiler_mode * afl-cc macro defs * afl-cc linking behaviors * afl-cc fsanitize behaviors * afl-cc misc * afl-cc body update * afl-cc all-in-one formated with custom-format.py * nits --------- Co-authored-by: vanhauser-thc <[email protected]> * changelog * update grammar mutator * lto llvm 12+ * docs(custom_mutators): fix missing ':' (#1953) * Fix broken LTO mode and response file support (#1948) * Strip `-Wl,-no-undefined` during compilation (#1952) Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`. Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix). * Remove dead code in write_to_testcase (#1955) The custom_mutators_count check in if case is duplicate with if condition. The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed. Signed-off-by: Xeonacid <[email protected]> * update qemuafl * WIP: Add ability to generate drcov trace using QEMU backend (#1956) * Document new drcov QEMU plugin * Add link to lightkeeper for QEMU drcov file loading --------- Co-authored-by: Jean-Romain Garnier <[email protected]> * code format * changelog * sleep on uid != 0 afl-system-config * fix segv about skip_next, warn on unsupported cases of linking options (#1958) * todos * ensure afl-cc only allows available compiler modes * update grammar mutator * disable aslr on apple * fix for arm64 * help selective instrumentation * typos * macos * add compiler test script * apple fixes * bump nyx submodules (#1963) * fix docs * update changelog * update grammar mutator * improve compiler test script * gcc asan workaround (#1966) * fix github merge fuckup * fix * Fix afl-cc (#1968) - Check if too many cmdline params here, each time before insert a new param. - Check if it is "-fsanitize=..." before we do sth. - Remove improper param_st transfer. * Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969) * Dynamic instrumentation filtering for LLVM native (#1971) * Add two dynamic instrumentation filter methods to runtime * Always use pc-table with native pcguard * Add make_symbol_list.py and README * changelog * todos * new forkserver check * fix * nyx test for CI * improve nyx docs * Fixes to afl-cc and documentation (#1974) * Always compile with -ldl when building for CODE_COVERAGE When building with CODE_COVERAGE, the afl runtime contains code that calls `dladdr` which requires -ldl. Under most circumstances, clang already adds this (e.g. when building with pc-table), but there are some circumstances where it isn't added automatically. * Add visibility declaration to __afl_connected When building with hidden visibility, the use of __AFL_LOOP inside such code can cause linker errors due to __afl_connected being declared "hidden". * Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter * nits * nyx build script updates * test error output * debug ci * debug ci * Improve afl-cc (#1975) * update response file support - full support of rsp file - fix some segv issues * Improve afl-cc - remove dead code about allow/denylist options of sancov - missing `if (!aflcc->have_msan)` - add docs for each function - typo * enable nyx * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * fix ci * clean test script * NO_NYX * NO_NYX * fix ci * debug ci * fix ci * finalize ci fix * Enhancement on Deterministic stage (#1972) * fuzzer: init commit based on aflpp 60dc37a * fuzzers: adding the skip variables and initialize * log: profile the det/havoc finding * log: add profile log output * fuzzers: sperate log/skipdet module * fuzzers: add quick eff_map calc * fuzzers: add skip_eff_map in fuzz_one * fuzzers: mark whole input space in eff_map * fuzzers: add undet bit threshold to skip some seeds * fuzzers: fix one byte overflow * fuzzers: fix overflow * fix code format * add havoc only again * code format * remove log to INTROSPECTION, rename skipdet module * rename skipdet module * remove log to stats * clean redundant code * code format * remove redundant code format check * remove redundant doc * remove redundant objects * clean files * change -d to default skipdet * disable deterministic when using CUSTOM_MUTATOR * revert fix * final touches for skipdet * remove unused var * remove redundant eff struct (#1977) * update QEMU-Nyx submodule (#1978) * update QEMU-Nyx submodule (#1980) * Fix type in AFL_NOOPT env variable in afl-cc help message (#1982) * nits * 2024 v4.10c release * fixes --------- Signed-off-by: Xeonacid <[email protected]> Co-authored-by: Sonic <[email protected]> Co-authored-by: Xeonacid <[email protected]> Co-authored-by: Nils Bars <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Sergej Schumilo <[email protected]> Co-authored-by: Christian Holler (:decoder) <[email protected]> Co-authored-by: Han Zheng <[email protected]> Co-authored-by: Khaled Yakdan <[email protected]>

* push to stable (#1983) * Output afl-clang-fast stuffs only if necessary (#1912) * afl-cc header * afl-cc common declarations - Add afl-cc-state.c - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c - Use debugf_args in main - Modify execvp stuffs to fit new aflcc struct * afl-cc show usage * afl-cc mode selecting 1. compiler_mode by callname in argv[0] 2. compiler_mode by env "AFL_CC_COMPILER" 3. compiler_mode/instrument_mode by command line options "--afl-..." 4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT" 5. final checking steps 6. print "... - mode: %s-%s\n" 7. determine real argv[0] according to compiler_mode * afl-cc macro defs * afl-cc linking behaviors * afl-cc fsanitize behaviors * afl-cc misc * afl-cc body update * afl-cc all-in-one formated with custom-format.py * nits --------- Co-authored-by: vanhauser-thc <[email protected]> * changelog * update grammar mutator * lto llvm 12+ * docs(custom_mutators): fix missing ':' (#1953) * Fix broken LTO mode and response file support (#1948) * Strip `-Wl,-no-undefined` during compilation (#1952) Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`. Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix). * Remove dead code in write_to_testcase (#1955) The custom_mutators_count check in if case is duplicate with if condition. The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed. Signed-off-by: Xeonacid <[email protected]> * update qemuafl * WIP: Add ability to generate drcov trace using QEMU backend (#1956) * Document new drcov QEMU plugin * Add link to lightkeeper for QEMU drcov file loading --------- Co-authored-by: Jean-Romain Garnier <[email protected]> * code format * changelog * sleep on uid != 0 afl-system-config * fix segv about skip_next, warn on unsupported cases of linking options (#1958) * todos * ensure afl-cc only allows available compiler modes * update grammar mutator * disable aslr on apple * fix for arm64 * help selective instrumentation * typos * macos * add compiler test script * apple fixes * bump nyx submodules (#1963) * fix docs * update changelog * update grammar mutator * improve compiler test script * gcc asan workaround (#1966) * fix github merge fuckup * fix * Fix afl-cc (#1968) - Check if too many cmdline params here, each time before insert a new param. - Check if it is "-fsanitize=..." before we do sth. - Remove improper param_st transfer. * Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969) * Dynamic instrumentation filtering for LLVM native (#1971) * Add two dynamic instrumentation filter methods to runtime * Always use pc-table with native pcguard * Add make_symbol_list.py and README * changelog * todos * new forkserver check * fix * nyx test for CI * improve nyx docs * Fixes to afl-cc and documentation (#1974) * Always compile with -ldl when building for CODE_COVERAGE When building with CODE_COVERAGE, the afl runtime contains code that calls `dladdr` which requires -ldl. Under most circumstances, clang already adds this (e.g. when building with pc-table), but there are some circumstances where it isn't added automatically. * Add visibility declaration to __afl_connected When building with hidden visibility, the use of __AFL_LOOP inside such code can cause linker errors due to __afl_connected being declared "hidden". * Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter * nits * nyx build script updates * test error output * debug ci * debug ci * Improve afl-cc (#1975) * update response file support - full support of rsp file - fix some segv issues * Improve afl-cc - remove dead code about allow/denylist options of sancov - missing `if (!aflcc->have_msan)` - add docs for each function - typo * enable nyx * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * fix ci * clean test script * NO_NYX * NO_NYX * fix ci * debug ci * fix ci * finalize ci fix * Enhancement on Deterministic stage (#1972) * fuzzer: init commit based on aflpp 60dc37a * fuzzers: adding the skip variables and initialize * log: profile the det/havoc finding * log: add profile log output * fuzzers: sperate log/skipdet module * fuzzers: add quick eff_map calc * fuzzers: add skip_eff_map in fuzz_one * fuzzers: mark whole input space in eff_map * fuzzers: add undet bit threshold to skip some seeds * fuzzers: fix one byte overflow * fuzzers: fix overflow * fix code format * add havoc only again * code format * remove log to INTROSPECTION, rename skipdet module * rename skipdet module * remove log to stats * clean redundant code * code format * remove redundant code format check * remove redundant doc * remove redundant objects * clean files * change -d to default skipdet * disable deterministic when using CUSTOM_MUTATOR * revert fix * final touches for skipdet * remove unused var * remove redundant eff struct (#1977) * update QEMU-Nyx submodule (#1978) * update QEMU-Nyx submodule (#1980) * Fix type in AFL_NOOPT env variable in afl-cc help message (#1982) * nits * 2024 v4.10c release * fixes --------- Signed-off-by: Xeonacid <[email protected]> Co-authored-by: Sonic <[email protected]> Co-authored-by: Xeonacid <[email protected]> Co-authored-by: Nils Bars <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Sergej Schumilo <[email protected]> Co-authored-by: Christian Holler (:decoder) <[email protected]> Co-authored-by: Han Zheng <[email protected]> Co-authored-by: Khaled Yakdan <[email protected]> * replaced unicornafl with unicorn The submodule of unicorn cannot be imported through unicornafl.*_const here. If we want to use the *_const module, we should reference `from unicorn.*_const import *` like this instead of importing the entire contents of the *_const module via unicornafl。 --------- Signed-off-by: Xeonacid <[email protected]> Co-authored-by: van Hauser <[email protected]> Co-authored-by: Sonic <[email protected]> Co-authored-by: Xeonacid <[email protected]> Co-authored-by: Nils Bars <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Sergej Schumilo <[email protected]> Co-authored-by: Christian Holler (:decoder) <[email protected]> Co-authored-by: Han Zheng <[email protected]> Co-authored-by: Khaled Yakdan <[email protected]>

* push to stable (#1983) * Output afl-clang-fast stuffs only if necessary (#1912) * afl-cc header * afl-cc common declarations - Add afl-cc-state.c - Strip includes, find_object, debug/be_quiet/have_*/callname setting from afl-cc.c - Use debugf_args in main - Modify execvp stuffs to fit new aflcc struct * afl-cc show usage * afl-cc mode selecting 1. compiler_mode by callname in argv[0] 2. compiler_mode by env "AFL_CC_COMPILER" 3. compiler_mode/instrument_mode by command line options "--afl-..." 4. instrument_mode/compiler_mode by various env vars including "AFL_LLVM_INSTRUMENT" 5. final checking steps 6. print "... - mode: %s-%s\n" 7. determine real argv[0] according to compiler_mode * afl-cc macro defs * afl-cc linking behaviors * afl-cc fsanitize behaviors * afl-cc misc * afl-cc body update * afl-cc all-in-one formated with custom-format.py * nits --------- Co-authored-by: vanhauser-thc <[email protected]> * changelog * update grammar mutator * lto llvm 12+ * docs(custom_mutators): fix missing ':' (#1953) * Fix broken LTO mode and response file support (#1948) * Strip `-Wl,-no-undefined` during compilation (#1952) Make the compiler wrapper stripping `-Wl,-no-undefined` in addition to `-Wl,--no-undefined`. Both versions of the flag are accepted by clang and, therefore, used by building systems in the wild (e.g., samba will not build without this fix). * Remove dead code in write_to_testcase (#1955) The custom_mutators_count check in if case is duplicate with if condition. The else case is custom_mutators_count == 0, neither custom_mutator_list iteration nor sent check needed. Signed-off-by: Xeonacid <[email protected]> * update qemuafl * WIP: Add ability to generate drcov trace using QEMU backend (#1956) * Document new drcov QEMU plugin * Add link to lightkeeper for QEMU drcov file loading --------- Co-authored-by: Jean-Romain Garnier <[email protected]> * code format * changelog * sleep on uid != 0 afl-system-config * fix segv about skip_next, warn on unsupported cases of linking options (#1958) * todos * ensure afl-cc only allows available compiler modes * update grammar mutator * disable aslr on apple * fix for arm64 * help selective instrumentation * typos * macos * add compiler test script * apple fixes * bump nyx submodules (#1963) * fix docs * update changelog * update grammar mutator * improve compiler test script * gcc asan workaround (#1966) * fix github merge fuckup * fix * Fix afl-cc (#1968) - Check if too many cmdline params here, each time before insert a new param. - Check if it is "-fsanitize=..." before we do sth. - Remove improper param_st transfer. * Avoid adding llvmnative instrumentation when linking rust sanitizer runtime (#1969) * Dynamic instrumentation filtering for LLVM native (#1971) * Add two dynamic instrumentation filter methods to runtime * Always use pc-table with native pcguard * Add make_symbol_list.py and README * changelog * todos * new forkserver check * fix * nyx test for CI * improve nyx docs * Fixes to afl-cc and documentation (#1974) * Always compile with -ldl when building for CODE_COVERAGE When building with CODE_COVERAGE, the afl runtime contains code that calls `dladdr` which requires -ldl. Under most circumstances, clang already adds this (e.g. when building with pc-table), but there are some circumstances where it isn't added automatically. * Add visibility declaration to __afl_connected When building with hidden visibility, the use of __AFL_LOOP inside such code can cause linker errors due to __afl_connected being declared "hidden". * Update docs to clarify that CODE_COVERAGE=1 is required for dynamic_covfilter * nits * nyx build script updates * test error output * debug ci * debug ci * Improve afl-cc (#1975) * update response file support - full support of rsp file - fix some segv issues * Improve afl-cc - remove dead code about allow/denylist options of sancov - missing `if (!aflcc->have_msan)` - add docs for each function - typo * enable nyx * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * debug ci * fix ci * clean test script * NO_NYX * NO_NYX * fix ci * debug ci * fix ci * finalize ci fix * Enhancement on Deterministic stage (#1972) * fuzzer: init commit based on aflpp 60dc37a * fuzzers: adding the skip variables and initialize * log: profile the det/havoc finding * log: add profile log output * fuzzers: sperate log/skipdet module * fuzzers: add quick eff_map calc * fuzzers: add skip_eff_map in fuzz_one * fuzzers: mark whole input space in eff_map * fuzzers: add undet bit threshold to skip some seeds * fuzzers: fix one byte overflow * fuzzers: fix overflow * fix code format * add havoc only again * code format * remove log to INTROSPECTION, rename skipdet module * rename skipdet module * remove log to stats * clean redundant code * code format * remove redundant code format check * remove redundant doc * remove redundant objects * clean files * change -d to default skipdet * disable deterministic when using CUSTOM_MUTATOR * revert fix * final touches for skipdet * remove unused var * remove redundant eff struct (#1977) * update QEMU-Nyx submodule (#1978) * update QEMU-Nyx submodule (#1980) * Fix type in AFL_NOOPT env variable in afl-cc help message (#1982) * nits * 2024 v4.10c release * fixes --------- Signed-off-by: Xeonacid <[email protected]> Co-authored-by: Sonic <[email protected]> Co-authored-by: Xeonacid <[email protected]> Co-authored-by: Nils Bars <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Sergej Schumilo <[email protected]> Co-authored-by: Christian Holler (:decoder) <[email protected]> Co-authored-by: Han Zheng <[email protected]> Co-authored-by: Khaled Yakdan <[email protected]> * Fix dump_regs() type errors in Python TypeError will occur as gdb api return some strange type of values that json can't serialize, this would fix this issue * Update reg_val is None condition --------- Signed-off-by: Xeonacid <[email protected]> Co-authored-by: van Hauser <[email protected]> Co-authored-by: Sonic <[email protected]> Co-authored-by: Xeonacid <[email protected]> Co-authored-by: Nils Bars <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Jean-Romain Garnier <[email protected]> Co-authored-by: Sergej Schumilo <[email protected]> Co-authored-by: Christian Holler (:decoder) <[email protected]> Co-authored-by: Han Zheng <[email protected]> Co-authored-by: Khaled Yakdan <[email protected]>

kdsjZh added 17 commits October 27, 2023 16:11

fuzzer: init commit based on aflpp 60dc37a

91d758e

fuzzers: adding the skip variables and initialize

94114a1

log: profile the det/havoc finding

445d69e

log: add profile log output

9ad112b

fuzzers: sperate log/skipdet module

eb3be74

fuzzers: add quick eff_map calc

f3b9d34

fuzzers: add skip_eff_map in fuzz_one

1d308b8

fuzzers: mark whole input space in eff_map

e1a81fa

fuzzers: add undet bit threshold to skip some seeds

87f5150

fuzzers: fix one byte overflow

506f012

fuzzers: fix overflow

ca4f62a

Merge remote-tracking branch 'vanilla/stable' into skip

0da8de0

Merge remote-tracking branch 'origin/skip' into dev_s

d4e3ad5

Merge remote-tracking branch 'vanilla/dev' into dev_s

4e19bbc

fix code format

993119b

add havoc only again

debc7ec

code format

29ed854

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

src/afl-skip-log.cc Outdated Show resolved Hide resolved

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

src/afl-skipdet.c Outdated Show resolved Hide resolved

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

src/afl-fuzz-one.c Show resolved Hide resolved

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

GNUmakefile Outdated Show resolved Hide resolved

github-advanced-security bot found potential problems Jan 28, 2024

View reviewed changes

src/afl-skipdet.c Fixed Show fixed Hide fixed

src/afl-skipdet.c Fixed Show fixed Hide fixed

kdsjZh added 5 commits January 28, 2024 14:57

remove log to INTROSPECTION, rename skipdet module

b2f7697

rename skipdet module

97fcc69

remove log to stats

915dd33

clean redundant code

9f9678c

code format

b713107

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

GNUmakefile Outdated Show resolved Hide resolved

domenukk reviewed Jan 28, 2024

View reviewed changes

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

GNUmakefile Outdated Show resolved Hide resolved

vanhauser-thc reviewed Jan 28, 2024

View reviewed changes

GNUmakefile Outdated Show resolved Hide resolved

kdsjZh added 2 commits January 28, 2024 16:06

remove redundant objects

3f004b2

clean files

717b3b9

change -d to default skipdet

3cad907

disable deterministic when using CUSTOM_MUTATOR

cfd7355

revert fix

c5303bb

vanhauser-thc merged commit 06f0982 into AFLplusplus:dev Feb 1, 2024

kdsjZh deleted the dev_s branch February 1, 2024 15:18

vanhauser-thc mentioned this pull request Feb 3, 2024

push to dev #1984

Closed

smoelius mentioned this pull request Mar 18, 2024

Question re -D (deterministic) flag #2037

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Enhancement on Deterministic stage #1972

Enhancement on Deterministic stage #1972

kdsjZh commented Jan 28, 2024 •

edited

Loading

vanhauser-thc commented Jan 28, 2024

vanhauser-thc commented Jan 28, 2024

domenukk Jan 28, 2024 •

edited

Loading

vanhauser-thc Jan 28, 2024

kdsjZh Jan 28, 2024 •

edited

Loading

kdsjZh Jan 28, 2024

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

vanhauser-thc commented Jan 28, 2024

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 29, 2024 •

edited

Loading

kdsjZh commented Jan 29, 2024

domenukk commented Jan 29, 2024 •

edited

Loading

kdsjZh commented Jan 29, 2024 •

edited

Loading

domenukk commented Jan 29, 2024

kdsjZh commented Jan 29, 2024

vanhauser-thc commented Jan 29, 2024

Enhancement on Deterministic stage #1972

Enhancement on Deterministic stage #1972

Conversation

kdsjZh commented Jan 28, 2024 • edited Loading

vanhauser-thc commented Jan 28, 2024

vanhauser-thc commented Jan 28, 2024

domenukk Jan 28, 2024 • edited Loading

Choose a reason for hiding this comment

vanhauser-thc Jan 28, 2024

Choose a reason for hiding this comment

kdsjZh Jan 28, 2024 • edited Loading

Choose a reason for hiding this comment

kdsjZh Jan 28, 2024

Choose a reason for hiding this comment

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 28, 2024 • edited Loading

kdsjZh commented Jan 28, 2024 • edited Loading

vanhauser-thc commented Jan 28, 2024

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 28, 2024 • edited Loading

kdsjZh commented Jan 28, 2024 • edited Loading

vanhauser-thc commented Jan 28, 2024

kdsjZh commented Jan 29, 2024 • edited Loading

kdsjZh commented Jan 29, 2024

domenukk commented Jan 29, 2024 • edited Loading

kdsjZh commented Jan 29, 2024 • edited Loading

domenukk commented Jan 29, 2024

kdsjZh commented Jan 29, 2024

vanhauser-thc commented Jan 29, 2024

kdsjZh commented Jan 28, 2024 •

edited

Loading

domenukk Jan 28, 2024 •

edited

Loading

kdsjZh Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 28, 2024 •

edited

Loading

kdsjZh commented Jan 29, 2024 •

edited

Loading

domenukk commented Jan 29, 2024 •

edited

Loading

kdsjZh commented Jan 29, 2024 •

edited

Loading