92 lines
2.9 KiB
Plaintext
92 lines
2.9 KiB
Plaintext
import csv
|
|
def_flags="--no-default-features --features std,snapshot_restore,singlecore"
|
|
|
|
rule build_random:
|
|
output:
|
|
directory("bins/target_random")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_longest"
|
|
|
|
rule build_feedlongest:
|
|
output:
|
|
directory("bins/target_feedlongest")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_longest"
|
|
|
|
rule build_feedaflnolongest:
|
|
output:
|
|
directory("bins/target_feedaflnolongest")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_afl"
|
|
|
|
rule build_afl:
|
|
output:
|
|
directory("bins/target_afl")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_afl,feed_longest"
|
|
|
|
rule build_state:
|
|
output:
|
|
directory("bins/target_state")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_systemtrace"
|
|
|
|
rule build_graph:
|
|
output:
|
|
directory("bins/target_graph")
|
|
shell:
|
|
"cargo build --target-dir {output} {def_flags},feed_systemgraph"
|
|
|
|
rule run_bench:
|
|
input:
|
|
"build/{target}.elf",
|
|
"bins/target_{fuzzer}"
|
|
output:
|
|
multiext("timedump/{fuzzer}/{target}.{num}", "", ".log", ".case")
|
|
run:
|
|
with open('target_symbols.csv') as csvfile:
|
|
reader = csv.DictReader(csvfile)
|
|
line = next((x for x in reader if x['kernel']==wildcards.target), None)
|
|
if line == None:
|
|
return False
|
|
kernel=line['kernel']
|
|
fuzz_main=line['main_function']
|
|
fuzz_input=line['input_symbol']
|
|
fuzz_len=line['input_size']
|
|
bkp=line['return_function']
|
|
script="""
|
|
mkdir -p $(dirname {output[0]})
|
|
export KERNEL=$(pwd)/{input[0]}
|
|
export FUZZ_MAIN={fuzz_main}
|
|
export FUZZ_INPUT={fuzz_input}
|
|
export FUZZ_INPUT_LEN={fuzz_len}
|
|
export BREAKPOINT={bkp}
|
|
export SEED_RANDOM=1
|
|
export TIME_DUMP=$(pwd)/{output[0]}
|
|
export CASE_DUMP=$(pwd)/{output[2]}
|
|
export FUZZ_ITERS=3600
|
|
export FUZZER=$(pwd)/{input[1]}/debug/fret
|
|
set +e
|
|
../fuzzer.sh > {output[1]} 2>&1
|
|
exit 0
|
|
"""
|
|
if wildcards.fuzzer == 'random':
|
|
script="export FUZZ_RANDOM=1\n"+script
|
|
shell(script)
|
|
|
|
rule all_bins:
|
|
input:
|
|
"bins/target_random",
|
|
"bins/target_feedlongest",
|
|
"bins/target_feedaflnolongest",
|
|
"bins/target_afl",
|
|
"bins/target_state",
|
|
"bins/target_graph"
|
|
|
|
rule all_periodic:
|
|
input:
|
|
expand("timedump/{fuzzer}/{target}.{num}", fuzzer=['random','afl','state','graph'], target=['waters'],num=range(0,10))
|
|
|
|
rule all_compare_afl_longest:
|
|
input:
|
|
expand("timedump/{fuzzer}/{target}.{num}", fuzzer=['afl','feedlongest','feedaflnolongest'], target=['waters'],num=range(0,10)) |