SYS-OSS/FRET-LibAFL
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add emergency_copter

Browse Source
This commit is contained in:
Alwin Berger 2024-11-14 14:38:49 +01:00
parent 0a233aad48
commit 317fbc8e3f
3 changed files with 33 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
fuzzers/FRET/benchmark/Snakefile
View File

@ -241,6 +241,13 @@ rule extended_set:
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['random'], target=['copter', 'release', 'waters'], variant=['_seq_full'], num=range(0,int( 1 ))),
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['random'], target=['copter', 'waters'], variant=['_seq_full','_seq_int','_seq_bytes'], num=range(0,int( 1 ))),
rule emergency_copter:
input:
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['feedgeneration100', 'stg', 'frafl'], target=['copter'], variant=['_seq_stateless_full'], num=range(0,int( 10 ))),
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['feedgeneration100', 'stg', 'frafl'], target=['copter'], variant=['_seq_full'], num=range(0,int( 10 ))),
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['random'], target=['copter'], variant=['_seq_full'], num=range(0,int( 10 ))),
expand("timedump/{fuzzer}/{target}{variant}#{num}.time", fuzzer=['random'], target=['copter'], variant=['_seq_stateless_full'], num=range(0,int( 10 ))),
rule all_bins:
input:
expand("bins/target_{target}",target=['random','frafl','stg','feedgeneration100','feedgeneration1000','genetic100','genetic1000'])

25
fuzzers/FRET/benchmark/build_all_demos.sh
View File

@ -6,13 +6,14 @@ build () {
cp ../../../../FreeRTOS/FreeRTOS/Demo/CORTEX_M3_MPS2_QEMU_GCC/build/RTOSDemo.axf build/$(echo $1 | cut -d_ -f1 | tr '[:upper:]' '[:lower:]')$2.elf
}
export DELETE_RNG_STATE=1
# Only bytes
export FUZZ_INT_ACTIVATION=0 FUZZ_BYTES=1 SUFFIX="_seq_bytes"
build WATERS_DEMO $SUFFIX
build RELEASE_DEMO $SUFFIX
build COPTER_DEMO $SUFFIX
build INTERACT_DEMO $SUFFIX
# Only interrupts
@ -21,7 +22,6 @@ export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=0 SUFFIX="_seq_int"
build WATERS_DEMO $SUFFIX
build RELEASE_DEMO $SUFFIX
build COPTER_DEMO $SUFFIX
build INTERACT_DEMO $SUFFIX
# Full
@ -30,5 +30,24 @@ export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=1 SUFFIX="_seq_full"
build WATERS_DEMO $SUFFIX
build RELEASE_DEMO $SUFFIX
build INTERACT_DEMO $SUFFIX
# Don't keep rng states
export DELETE_RNG_STATE=1
export FUZZ_INT_ACTIVATION=0 FUZZ_BYTES=1 SUFFIX="_seq_stateless_bytes"
build COPTER_DEMO $SUFFIX
build INTERACT_DEMO $SUFFIX
export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=0 SUFFIX="_seq_stateless_int"
build COPTER_DEMO $SUFFIX
export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=1 SUFFIX="_seq_stateless_full"
build COPTER_DEMO $SUFFIX
# Keep rng states
export DELETE_RNG_STATE=0
export FUZZ_INT_ACTIVATION=0 FUZZ_BYTES=1 SUFFIX="_seq_bytes"
build COPTER_DEMO $SUFFIX
export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=0 SUFFIX="_seq_int"
build COPTER_DEMO $SUFFIX
export FUZZ_INT_ACTIVATION=1 FUZZ_BYTES=1 SUFFIX="_seq_full"
build COPTER_DEMO $SUFFIX

5
fuzzers/FRET/benchmark/target_symbols.csv
View File

@ -11,4 +11,7 @@ release_seq_int,main_release,FUZZ_INPUT,4096,trigger_Qemu_break,T3,0#10000;1#500
release_seq_bytes,main_release,FUZZ_INPUT,4096,trigger_Qemu_break,T3,
copter_seq_full,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,FC,0#5000
copter_seq_int,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,FC,0#5000
copter_seq_bytes,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,SPAttitud,
copter_seq_bytes,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,SPAttitud,
copter_seq_stateless_full,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,FC,0#5000
copter_seq_stateless_int,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,FC,0#5000
copter_seq_stateless_bytes,main_osek,FUZZ_INPUT,4096,trigger_Qemu_break,SPAttitud,
1 kernel main_function input_symbol input_size return_function select_task interrupts
11 release_seq_bytes main_release FUZZ_INPUT 4096 trigger_Qemu_break T3
12 copter_seq_full main_osek FUZZ_INPUT 4096 trigger_Qemu_break FC 0#5000
13 copter_seq_int main_osek FUZZ_INPUT 4096 trigger_Qemu_break FC 0#5000
14 copter_seq_bytes main_osek FUZZ_INPUT 4096 trigger_Qemu_break SPAttitud
15 copter_seq_stateless_full main_osek FUZZ_INPUT 4096 trigger_Qemu_break FC 0#5000
16 copter_seq_stateless_int main_osek FUZZ_INPUT 4096 trigger_Qemu_break FC 0#5000
17 copter_seq_stateless_bytes main_osek FUZZ_INPUT 4096 trigger_Qemu_break SPAttitud