SYS-OSS/FRET-LibAFL
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

max len done right

Browse Source
This commit is contained in:
Andrea Fioraldi 2021-02-12 23:06:32 +01:00
parent ebc9571410
commit 9bc4d81b76
7 changed files with 48 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
afl/src/events/mod.rs
View File

@ -578,7 +578,7 @@ where
corpus_size, corpus_size,
observers_buf: _, observers_buf: _,
time, time,
executions executions,
} => { } => {
let client = stats.client_stats_mut_for(sender_id); let client = stats.client_stats_mut_for(sender_id);
client.update_corpus_size(*corpus_size as u64); client.update_corpus_size(*corpus_size as u64);
@ -639,7 +639,7 @@ where
corpus_size: _, corpus_size: _,
observers_buf, observers_buf,
time: _, time: _,
executions: _ executions: _,
} => { } => {
// TODO: here u should match client_config, if equal to the current one do not re-execute // TODO: here u should match client_config, if equal to the current one do not re-execute
// we need to pass engine to process() too, TODO // we need to pass engine to process() too, TODO
@ -977,7 +977,7 @@ mod tests {
corpus_size: 123, corpus_size: 123,
client_config: "conf".into(), client_config: "conf".into(),
time: current_time(), time: current_time(),
executions: 0 executions: 0,
}; };
let serialized = postcard::to_allocvec(&e).unwrap(); let serialized = postcard::to_allocvec(&e).unwrap();
@ -990,7 +990,7 @@ mod tests {
corpus_size: _, corpus_size: _,
client_config: _, client_config: _,
time: _, time: _,
executions: _ executions: _,
} => { } => {
let o = map.deserialize(&observers_buf).unwrap(); let o = map.deserialize(&observers_buf).unwrap();
let test_observer = o.match_name_type::<StdMapObserver<u32>>("test").unwrap(); let test_observer = o.match_name_type::<StdMapObserver<u32>>("test").unwrap();

11
afl/src/events/stats.rs
View File

@ -26,7 +26,9 @@ pub struct ClientStats {
impl ClientStats { impl ClientStats {
/// We got a new information about executions for this client, insert them. /// We got a new information about executions for this client, insert them.
pub fn update_executions(&mut self, executions: u64, cur_time: time::Duration) { pub fn update_executions(&mut self, executions: u64, cur_time: time::Duration) {
let diff = cur_time.checked_sub(self.last_window_time).map_or(0, |d| d.as_secs()); let diff = cur_time
.checked_sub(self.last_window_time)
.map_or(0, |d| d.as_secs());
if diff > CLIENT_STATS_TIME_WINDOW_SECS { if diff > CLIENT_STATS_TIME_WINDOW_SECS {
let _ = self.execs_per_sec(cur_time); let _ = self.execs_per_sec(cur_time);
self.last_window_time = cur_time; self.last_window_time = cur_time;
@ -46,7 +48,9 @@ impl ClientStats {
return 0; return 0;
} }
let elapsed = cur_time.checked_sub(self.last_window_time).map_or(0, |d| d.as_secs()); let elapsed = cur_time
.checked_sub(self.last_window_time)
.map_or(0, |d| d.as_secs());
if elapsed == 0 { if elapsed == 0 {
return self.last_execs_per_sec as u64; return self.last_execs_per_sec as u64;
} }
@ -62,7 +66,8 @@ impl ClientStats {
self.last_execs_per_sec = cur_avg; self.last_execs_per_sec = cur_avg;
} }
self.last_execs_per_sec = self.last_execs_per_sec * (1.0 - 1.0 / 16.0) + cur_avg * (1.0 / 16.0); self.last_execs_per_sec =
self.last_execs_per_sec * (1.0 - 1.0 / 16.0) + cur_avg * (1.0 / 16.0);
self.last_execs_per_sec as u64 self.last_execs_per_sec as u64
} }
} }

21
afl/src/observers/mod.rs
View File

@ -383,7 +383,6 @@ where
} }
} }
/// Map observer with hitcounts postprocessing /// Map observer with hitcounts postprocessing
#[derive(Serialize, Deserialize, Clone, Debug)] #[derive(Serialize, Deserialize, Clone, Debug)]
#[serde(bound = "M: serde::de::DeserializeOwned")] #[serde(bound = "M: serde::de::DeserializeOwned")]
@ -394,7 +393,20 @@ where
base: M, base: M,
} }
static COUNT_CLASS_LOOKUP: [u8; 256] = [0, 1, 2, 0, 8, 8, 8, 8, 16, 16, 16, 16, 16, 16, 16, 16, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128]; static COUNT_CLASS_LOOKUP: [u8; 256] = [
0, 1, 2, 0, 8, 8, 8, 8, 16, 16, 16, 16, 16, 16, 16, 16, 32, 32, 32, 32, 32, 32, 32, 32, 32, 32,
32, 32, 32, 32, 32, 32, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
64, 64, 64, 64, 64, 64, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128, 128,
];
impl<M> Observer for HitcountsMapObserver<M> impl<M> Observer for HitcountsMapObserver<M>
where where
@ -465,12 +477,9 @@ where
{ {
/// Creates a new MapObserver /// Creates a new MapObserver
pub fn new(base: M) -> Self { pub fn new(base: M) -> Self {
Self { Self { base: base }
base: base,
} }
} }
}
#[cfg(feature = "std")] #[cfg(feature = "std")]
#[cfg(test)] #[cfg(test)]

15
fuzzers/libfuzzer_libpng/src/mod.rs
View File

@ -13,7 +13,7 @@ use afl::{
executors::{inprocess::InProcessExecutor, Executor, ExitKind}, executors::{inprocess::InProcessExecutor, Executor, ExitKind},
feedbacks::MaxMapFeedback, feedbacks::MaxMapFeedback,
inputs::Input, inputs::Input,
mutators::{scheduled::HavocBytesMutator, HasMaxSize}, mutators::scheduled::HavocBytesMutator,
observers::StdMapObserver, observers::StdMapObserver,
stages::mutational::StdMutationalStage, stages::mutational::StdMutationalStage,
state::{HasCorpus, State}, state::{HasCorpus, State},
@ -51,7 +51,10 @@ where
/// The main fn, parsing parameters, and starting the fuzzer /// The main fn, parsing parameters, and starting the fuzzer
pub fn main() { pub fn main() {
println!("Workdir: {:?}", env::current_dir().unwrap().to_string_lossy().to_string()); println!(
"Workdir: {:?}",
env::current_dir().unwrap().to_string_lossy().to_string()
);
fuzz(vec![PathBuf::from("./corpus")], 1337).expect("An error occurred while fuzzing"); fuzz(vec![PathBuf::from("./corpus")], 1337).expect("An error occurred while fuzzing");
} }
@ -81,8 +84,7 @@ fn fuzz(corpus_dirs: Vec<PathBuf>, broker_port: u16) -> Result<(), AflError> {
println!("We're a client, let's fuzz :)"); println!("We're a client, let's fuzz :)");
let mut mutator = HavocBytesMutator::new_default(); let mutator = HavocBytesMutator::new_default();
mutator.set_max_size(4096);
let stage = StdMutationalStage::new(mutator); let stage = StdMutationalStage::new(mutator);
let mut fuzzer = StdFuzzer::new(tuple_list!(stage)); let mut fuzzer = StdFuzzer::new(tuple_list!(stage));
@ -108,7 +110,10 @@ fn fuzz(corpus_dirs: Vec<PathBuf>, broker_port: u16) -> Result<(), AflError> {
if state.corpus().count() < 1 { if state.corpus().count() < 1 {
state state
.load_initial_inputs(&mut executor, &mut restarting_mgr, &corpus_dirs) .load_initial_inputs(&mut executor, &mut restarting_mgr, &corpus_dirs)
.expect(&format!("Failed to load initial corpus at {:?}", &corpus_dirs)); .expect(&format!(
"Failed to load initial corpus at {:?}",
&corpus_dirs
));
println!("We imported {} inputs from disk.", state.corpus().count()); println!("We imported {} inputs from disk.", state.corpus().count());
} }