AFLplusplus / AFLplusplus/LibAFL

Objective Deduplication using the stack/call trace helper for QemuForkExecutor

Đang mở
#1,644 1 bình luận 0 reaction 0 người được giao Xem trên GitHub
Ngôn ngữ chính
Rust
Star
2.6k
Fork
481
Merge trung bình
2 ngày 30 phút
Pull request đã merge (30 ngày)
16

Mô tả

I'm trying to implement a deduplication objective using existing crash hash, stack/call trace helper, and related objectives. The challenge is, I'm doing this for the QemuForkExecutor, and as expected, the default call trace helper in Qemu seems to have been designed for the in-process executor, and using it with a QemuForkExecutor will crash the fuzzer. I still trying to understand the inner working of LibAFL, so I was thinking about simply copying the existing helper and setting const HOOKS_DO_SIDE_EFFECTS: bool = false;. Would this be a problem? I am trying to avoid using the HitCounts map for deduplication because we could have the same crash, with the same call/stack trace but different edge hit counts, and I suppose a deduplication feedback based on the Hitcounts map woud consider such a scenario as unique crashes.
Any ideas on how to go about this would be very much appreciated.
Thanks a lot in advance.

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.