-
Notifications
You must be signed in to change notification settings - Fork 8
Add Dictionary/Extras Support #15
Comments
I was looking at doing this. Can you give a little background of how afl generates extras during the fuzzing? taking a dict as a command-line parameter and parsing is pretty straight-forward. But generating them during fuzzing was a bit confusing 😅 |
We can start with the "normal" ones and go from there :) |
Ok. So, if we get a dict, do we need any special mutators for them? Or the havoc ones work(for now)? |
Havoc needs to take extras into account, that's okay for now. Later we'll probably want redqueen |
👍 I think we'll need a deterministic stage too now? |
If we want to be close to AFL, eventually yes |
I've started with the |
Don't code, I have the lock this week, deterministic can be implemented just using the stage_idx parameter to mutate (that was in FFF for this purpose, but was not ported to LibAFL) |
The main feature lacking in LibAFL right now is Extas support.
This includes the dictionary extras, you would pass to AFL using
-x
, but also autoextras added during fuzzing, as well as the compile-time autodict feature in AFL LTO builds, and eventually even cmplog.The important pieces of code are in https://github.com/AFLplusplus/AFLplusplus/blob/stable/src/afl-fuzz-extras.c
The text was updated successfully, but these errors were encountered: