SYS-OSS/FRET-LibAFL
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add SnapshotModule to qemu_coverage tool (#2885)

Browse Source 
Co-authored-by: Your Name <you@example.com>
This commit is contained in:
WorksButNotTested 2025-01-23 10:23:37 +00:00 committed by GitHub
parent e84429012b
commit c5b7c7c235
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
fuzzers/binary_only/qemu_coverage/src/fuzzer.rs
View File

@ -28,8 +28,10 @@ use libafl_bolts::{
AsSlice, AsSlice,
}; };
use libafl_qemu::{ use libafl_qemu::{
elf::EasyElf, modules::drcov::DrCovModule, ArchExtras, CallingConvention, Emulator, GuestAddr, elf::EasyElf,
GuestReg, MmapPerms, Qemu, QemuExecutor, QemuExitReason, QemuRWError, QemuShutdownCause, Regs, modules::{drcov::DrCovModule, SnapshotModule},
ArchExtras, CallingConvention, Emulator, GuestAddr, GuestReg, MmapPerms, Qemu, QemuExecutor,
QemuExitReason, QemuRWError, QemuShutdownCause, Regs,
}; };
#[derive(Default)] #[derive(Default)]
@ -132,10 +134,13 @@ pub fn fuzz() {
let core = core_id.0; let core = core_id.0;
cov_path.set_file_name(format!("{coverage_name}-{core:03}.{coverage_extension}")); cov_path.set_file_name(format!("{coverage_name}-{core:03}.{coverage_extension}"));
let emulator_modules = tuple_list!(DrCovModule::builder() let emulator_modules = tuple_list!(
.filename(cov_path.clone()) DrCovModule::builder()
.full_trace(false) .filename(cov_path.clone())
.build()); .full_trace(false)
.build(),
SnapshotModule::new()
);
let emulator = Emulator::empty() let emulator = Emulator::empty()
.qemu_parameters(options.args.clone()) .qemu_parameters(options.args.clone())
@ -200,7 +205,7 @@ pub fn fuzz() {
}; };
let mut harness = let mut harness =
|emulator: &mut Emulator<_, _, _, _, _, _, _>, state: &mut _, input: &BytesInput| { |emulator: &mut Emulator<_, _, _, _, _, _, _>, _state: &mut _, input: &BytesInput| {
let qemu = emulator.qemu(); let qemu = emulator.qemu();
let target = input.target_bytes(); let target = input.target_bytes();