-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
4.20 release pre-PR #2052
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
4.20 release pre-PR #2052
Conversation
…eep area ptr and loc logic intact in record replay mode, move replay record example to own dir in utils, update docs, move record compat layer to separate header file
- Introduce the -l option to set min block deletion length using powers of 2 (e.g., 1, 2, 4, 8, 16, ...). - This enables a trade-off between minimization thoroughness and speed. - Adjusting del_len_limit allows for faster processing, as doubling it roughly halves the minimization time.
Add -l option for adjustable block deletion performance in tmin
The method of getting the newest version of Frida is invalid. Need update.
bugfix: update_firda_version can't get the newest version of frida
The recently added config option 'enable-plugins' breaks static builds of qemuafl. Override the enable for static builds.
Fix build_qemu_support.sh static builds
bugfix: override directive and recipe echoing in GNUmakefile
citation: fix typo
When the computer is suspended during a fuzzing session, the time spent in suspended state is counted as a "run time" on a statistics screen. The time returned by `gettimeofday(2)` is affected by discontinuous jumps in the system time. It is better using `clock_gettime(2)`. The patch replace `gettimeofday` with `clock_gettime` [1]. `clock_gettime` uses a CLOCK_MONOTONIC_COARSE clock type, it is faster than CLOCK_MONOTONIC, but still has resolution (~1ms) that is adequate for our purposes. However, CLOCK_MONOTONIC_COARSE is a Linux-specific clock variant, so on macOS it is replaced with CLOCK_MONOTONIC, and with CLOCK_MONOTONIC_FAST on FreeBSD [2]. Closes #1241 1. https://pubs.opengroup.org/onlinepubs/9699919799/functions/clock_gettime.html 2. https://man.freebsd.org/cgi/man.cgi?query=clock_gettime
src: fix calculation of fuzzing time in statistics
Updated unicorn_dumper_gdb.py to support new gef api and replaced deprecated functions . The functions that are not in the new gef api are read_memory(), and current_arch(). Also replaced some deprecated functions with the updated versions of them. replaced read_memory() with GefMemoryManager.read() as read_memory(). read_memory() is in legacy-gef-api replaced current_arch with gef.arch.registers replaced get_process_maps() with gef.memory.maps (just depreacated) replaced get_register() with gef.arch.register()
This currently does not affect statsd nor the UI. Only the fuzzer_stats file is updated
Adds stats tracking for time spend actually mutating & running test i…
Clarify that oss-fuzz doesn't randomize builds anymore
Just in time for legalization in Germany |
@@ -21,7 +21,7 @@ If you want to build AFL++ yourself, you have many options. The easiest choice | |||
is to build and install everything: | |||
|
|||
NOTE: depending on your Debian/Ubuntu/Kali/... release, replace `-14` with | |||
whatever llvm version is available. We recommend llvm 13, 14, 15 or 16. | |||
whatever llvm version is available. We recommend llvm 13 or newer. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Shouldn't we recommend the latest stable version for performance/optimization reasons?
@@ -0,0 +1,183 @@ | |||
/* |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Stupid question, looks like this is the zLIB license, compatible with GPL, but so far we have apache everywhere else.. could that pose a problem for users?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Very good question. Will check it out
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
https://www.apache.org/legal/resolved.html states it’s compatible
Add optional handling of Nyx InvalidWriteToPayload event
No description provided.