save ondisk

.gitignore

@@ -10,6 +10,8 @@ Cargo.lock
 *.dll
 *.exe
 
+crashes
+
 callgrind.out.*
 perf.data
 perf.data.old

afl/src/corpus/ondisk.rs

@@ -59,6 +59,7 @@ where
             }
             _ => {}
         }
+        entry.store_input().expect("Could not save testcase to disk".into());
         self.entries.push(RefCell::new(entry));
         self.entries.len() - 1
     }

afl/src/corpus/testcase.rs

@@ -41,6 +41,22 @@ where
         Ok(self.input.as_ref().unwrap())
     }
 
+    /// Store the input to disk if possible
+    pub fn store_input(&mut self) -> Result<bool, AflError> {
+        let fname;
+        match self.filename() {
+            Some(f) => { fname = f.clone(); },
+            None => { return Ok(false); }
+        };
+        match self.input_mut() {
+            None => Ok(false),
+            Some(i) => {
+                i.to_file(fname)?;
+                Ok(true)
+            }
+        }
+    }
+
     /// Get the input, if any
     #[inline]
     pub fn input(&self) -> &Option<I> {

fuzzers/libfuzzer_libpng/test.sh

@@ -1,5 +1,7 @@
 #!/bin/sh
 
+mkdir -p ./crashes
+
 cargo build --release || exit 1
 cp ../../target/release/libfuzzer ./.libfuzzer_test.elf