SYS-OSS/FRET-LibAFL
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing python example (#1016)

Browse Source 
* Fixing python example

* Fix python baby fuzzer

---------

Co-authored-by: Andrea Fioraldi <andreafioraldi@gmail.com>
This commit is contained in:
Dominik Maier 2023-01-30 20:03:07 +01:00 committed by GitHub
parent afa506c0c8
commit ff9208f107
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 45 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

73
fuzzers/baby_fuzzer/baby_fuzzer.py
View File

@ -4,67 +4,84 @@ from pylibafl import libafl
def map_observer_wrapper(map_observer): def map_observer_wrapper(map_observer):
if type(map_observer).__name__ == "OwnedMapObserverI32": if type(map_observer).__name__ == "OwnedMapObserverI32":
return libafl.MapObserverI32.new_from_owned(map_observer) return libafl.MapObserverI32.new_owned(map_observer)
def executor_wrapper(executor): def executor_wrapper(executor):
if type(executor).__name__ == "OwnedInProcessExecutorI32": if type(executor).__name__ == "InProcessExecutor":
return libafl.ExecutorI32.new_from_inprocess(executor) return libafl.Executor.new_inprocess(executor)
def generator_wrapper(generator):
if type(generator).__name__ == "RandPrintablesGenerator":
return libafl.Generator.new_rand_printables(generator)
def monitor_wrapper(monitor): def monitor_wrapper(monitor):
if type(monitor).__name__ == "SimpleMonitor": return monitor.as_monitor()
return libafl.Monitor.new_from_simple(monitor)
def event_manager_wrapper(event_manager): def event_manager_wrapper(event_manager):
if type(event_manager).__name__ == "SimpleEventManager": return event_manager.as_manager()
return libafl.EventManagerI32.new_from_simple(event_manager)
def corpus_wrapper(corpus): def corpus_wrapper(corpus):
if type(corpus).__name__ == "InMemoryCorpus": if type(corpus).__name__ == "InMemoryCorpus":
return libafl.Corpus.new_from_in_memory(corpus) return libafl.Corpus.new_in_memory(corpus)
if type(corpus).__name__ == "OnDiskCorpus": if type(corpus).__name__ == "OnDiskCorpus":
return libafl.Corpus.new_from_on_disk(corpus) return libafl.Corpus.new_on_disk(corpus)
def rand_wrapper(rand): def rand_wrapper(rand):
if type(rand).__name__ == "StdRand": if type(rand).__name__ == "StdRand":
return libafl.Rand.new_from_std(rand) return libafl.Rand.new_std(rand)
def mutator_wrapper(mutator):
if type(mutator).__name__ == "StdHavocMutator":
return libafl.Mutator.new_std_havoc(mutator)
def stage_wrapper(stage): def stage_wrapper(stage):
if type(stage).__name__ == "StdScheduledHavocMutationsStageI32": if type(stage).__name__ == "StdMutationalStage":
return libafl.StageI32.new_from_std_scheduled(stage) return libafl.Stage.new_std_mutational(stage)
# CODE WRITTEN BY USER # CODE WRITTEN BY USER
def harness(inp):
if len(inp.hex()) >= 2 and inp.hex()[:2] == '61':
raise Exception("NOOOOOO =)")
map_observer = libafl.OwnedMapObserverI32("signals", [0] * 16) map_observer = libafl.OwnedMapObserverI32("signals", [0] * 16)
feedback_state = libafl.MapFeedbackStateI32.with_observer(map_observer_wrapper(map_observer)) def harness(inp):
#print(inp)
map_observer[0] = 1
if len(inp) > 0 and inp[0] == ord('a'):
map_observer[1] = 1
if len(inp) > 1 and inp[1] == ord('b'):
map_observer[2] = 1
if len(inp) > 2 and inp[2] == ord('c'):
map_observer[3] = 1
raise Exception("NOOOOOO =)")
feedback = libafl.MaxMapFeedbackI32(feedback_state, map_observer_wrapper(map_observer)) feedback = libafl.MaxMapFeedbackI32(map_observer_wrapper(map_observer))
objective = libafl.CrashFeedback()
state = libafl.StdStateI32( state = libafl.StdState(
rand_wrapper(libafl.StdRand.with_current_nanos()), rand_wrapper(libafl.StdRand.with_current_nanos()),
corpus_wrapper(libafl.InMemoryCorpus()), corpus_wrapper(libafl.InMemoryCorpus()),
corpus_wrapper(libafl.OnDiskCorpus("./crashes")), corpus_wrapper(libafl.OnDiskCorpus("./crashes")),
feedback_state feedback.as_feedback(),
objective.as_feedback(),
) )
monitor = libafl.SimpleMonitor() monitor = libafl.SimpleMonitor(lambda x: print(x))
mgr = libafl.SimpleEventManager(monitor_wrapper(monitor)) mgr = libafl.SimpleEventManager(monitor_wrapper(monitor))
fuzzer = libafl.StdFuzzerI32(feedback) fuzzer = libafl.StdFuzzer(feedback.as_feedback(), objective.as_feedback())
executor = libafl.OwnedInProcessExecutorI32(harness, map_observer_wrapper(map_observer), fuzzer, state, event_manager_wrapper(mgr)) observers = libafl.ObserversTuple([libafl.Observer.new_map_i32(map_observer_wrapper(map_observer))])
generator = libafl.RandPrintablesGeneratorI32(32) executor = libafl.InProcessExecutor(harness, observers, fuzzer, state, event_manager_wrapper(mgr))
state.generate_initial_inputs(fuzzer, executor_wrapper(executor), generator, event_manager_wrapper(mgr), 8) generator = libafl.RandPrintablesGenerator(32)
stage = libafl.StdScheduledHavocMutationsStageI32.new_from_scheduled_havoc_mutations() state.generate_initial_inputs(fuzzer, executor_wrapper(executor), generator_wrapper(generator), event_manager_wrapper(mgr), 3)
stage_tuple_list = libafl.StagesOwnedListI32(stage_wrapper(stage)) mutator = libafl.StdHavocMutator()
fuzzer.fuzz_loop(executor_wrapper(executor), state, event_manager_wrapper(mgr), stage_tuple_list) stage = libafl.StdMutationalStage(mutator_wrapper(mutator))
stages = libafl.StagesTuple([stage_wrapper(stage)])
fuzzer.fuzz_loop(executor_wrapper(executor), state, event_manager_wrapper(mgr), stages)