Skip to content

Commit

Permalink
refactoring getting the map size
Browse files Browse the repository at this point in the history
  • Loading branch information
vanhauser-thc committed Apr 17, 2020
1 parent 1931838 commit 76e15a0
Show file tree
Hide file tree
Showing 7 changed files with 33 additions and 46 deletions.
5 changes: 3 additions & 2 deletions TODO.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,12 @@
# TODO list for AFL++

## Roadmap 2.64
## Roadmap 2.65

- AFL_MAP_SIZE for afl-llvm-pass, qemu_mode and unicorn_mode
- fix stability calculation bug
- random crc32 HASH_CONST per run? because with 65536 paths we have collisions
- namespace for targets? e.g. network
- libradamsa as a custom module?
- fix stability calculation bug

## Further down the road

Expand Down
2 changes: 2 additions & 0 deletions include/common.h
Original file line number Diff line number Diff line change
Expand Up @@ -115,5 +115,7 @@ u8 *u_stringify_time_diff(u8 *buf, u64 cur_ms, u64 event_ms);
u32 read_timed(s32 fd, void *buf, size_t len, u32 timeout_ms,
volatile u8 *stop_soon_p);

u32 get_map_size();

#endif

11 changes: 2 additions & 9 deletions src/afl-analyze.c
Original file line number Diff line number Diff line change
Expand Up @@ -814,7 +814,7 @@ int main(int argc, char **argv, char **envp) {

s32 opt;
u8 mem_limit_given = 0, timeout_given = 0, unicorn_mode = 0, use_wine = 0;
char **use_argv, *ptr;
char **use_argv;

doc_path = access(DOC_PATH, F_OK) ? "docs" : DOC_PATH;

Expand Down Expand Up @@ -934,14 +934,7 @@ int main(int argc, char **argv, char **envp) {

if (optind == argc || !in_file) usage(argv[0]);

if ((ptr = getenv("AFL_MAP_SIZE")) || (ptr = getenv("AFL_MAPSIZE"))) {

map_size = atoi(ptr);
if (map_size < 8 || map_size > (1 << 29))
FATAL("illegal AFL_MAP_SIZE %u, must be between 2^3 and 2^30", map_size);
if (map_size % 8) map_size = (((map_size >> 3) + 1) << 3);

}
map_size = get_map_size();

use_hex_offsets = !!get_afl_env("AFL_ANALYZE_HEX");

Expand Down
18 changes: 18 additions & 0 deletions src/afl-common.c
Original file line number Diff line number Diff line change
Expand Up @@ -898,3 +898,21 @@ u32 read_timed(s32 fd, void *buf, size_t len, u32 timeout_ms,

}

u32 get_map_size() {

uint32_t map_size = MAP_SIZE;
char * ptr;

if ((ptr = getenv("AFL_MAP_SIZE")) || (ptr = getenv("AFL_MAPSIZE"))) {

map_size = atoi(ptr);
if (map_size < 8 || map_size > (1 << 29))
FATAL("illegal AFL_MAP_SIZE %u, must be between 2^3 and 2^30", map_size);
if (map_size % 8) map_size = (((map_size >> 3) + 1) << 3);

}

return map_size;

}

15 changes: 2 additions & 13 deletions src/afl-fuzz.c
Original file line number Diff line number Diff line change
Expand Up @@ -234,7 +234,7 @@ int main(int argc, char **argv_orig, char **envp) {
s32 opt;
u64 prev_queued = 0;
u32 sync_interval_cnt = 0, seek_to, show_help = 0, map_size = MAP_SIZE;
u8 * extras_dir = 0, *ptr;
u8 * extras_dir = 0;
u8 mem_limit_given = 0, exit_1 = 0;
char **use_argv;

Expand All @@ -247,19 +247,8 @@ int main(int argc, char **argv_orig, char **envp) {
if (!afl) { FATAL("Could not create afl state"); }

if (get_afl_env("AFL_DEBUG")) afl->debug = 1;
if ((ptr = get_afl_env("AFL_MAP_SIZE")) ||
(ptr = get_afl_env("AFL_MAPSIZE"))) {

map_size = atoi(ptr);
if (map_size < 8 || map_size > (1 << 29))
FATAL(
"the specified AFL_MAP_SIZE size is illegal and must be between 2^3 "
"and 2^30: %u\n",
map_size);
if (map_size % 8) map_size = (((map_size >> 3) + 1) << 3);

}

map_size = get_map_size();
afl_state_init(afl, map_size);
afl_fsrv_init(&afl->fsrv);

Expand Down
14 changes: 3 additions & 11 deletions src/afl-showmap.c
Original file line number Diff line number Diff line change
Expand Up @@ -536,23 +536,15 @@ int main(int argc, char **argv_orig, char **envp) {
s32 opt, i;
u8 mem_limit_given = 0, timeout_given = 0, unicorn_mode = 0, use_wine = 0;
u32 tcnt = 0;
char **use_argv, *ptr;
char **use_argv;

char **argv = argv_cpy_dup(argc, argv_orig);

afl_forkserver_t fsrv_var = {0};
afl_forkserver_t *fsrv = &fsrv_var;
afl_fsrv_init(fsrv);

if ((ptr = getenv("AFL_MAP_SIZE")) || (ptr = getenv("AFL_MAPSIZE"))) {

map_size = atoi(ptr);
if (map_size < 8 || map_size > (1 << 29))
FATAL("illegal AFL_MAP_SIZE %u, must be between 2^3 and 2^30", map_size);
if (map_size % 8) map_size = (((map_size >> 3) + 1) << 3);
fsrv->map_size = map_size;

}
map_size = get_map_size();
fsrv->map_size = map_size;

doc_path = access(DOC_PATH, F_OK) ? "docs" : DOC_PATH;

Expand Down
14 changes: 3 additions & 11 deletions src/afl-tmin.c
Original file line number Diff line number Diff line change
Expand Up @@ -758,23 +758,15 @@ int main(int argc, char **argv_orig, char **envp) {

s32 opt;
u8 mem_limit_given = 0, timeout_given = 0, unicorn_mode = 0, use_wine = 0;
char **use_argv, *ptr;
char **use_argv;

char **argv = argv_cpy_dup(argc, argv_orig);

afl_forkserver_t fsrv_var = {0};
afl_forkserver_t *fsrv = &fsrv_var;
afl_fsrv_init(fsrv);

if ((ptr = getenv("AFL_MAP_SIZE")) || (ptr = getenv("AFL_MAPSIZE"))) {

map_size = atoi(ptr);
if (map_size < 8 || map_size > (1 << 29))
FATAL("illegal AFL_MAP_SIZE %u, must be between 2^3 and 2^30", map_size);
if (map_size % 8) map_size = (((map_size >> 3) + 1) << 3);
fsrv->map_size = map_size;

}
map_size = get_map_size();
fsrv->map_size = map_size;

doc_path = access(DOC_PATH, F_OK) ? "docs" : DOC_PATH;

Expand Down

0 comments on commit 76e15a0

Please sign in to comment.