From 3d0ea97f774a12b351feaef01a9fc4cb4162c60aee78f2eb59ab3c2941698caf Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 25 Feb 2020 16:42:55 +0000 Subject: [PATCH] Accepting request 779147 from home:msmeissn:branches:devel:tools - updated to 2.61c - use -march=native if available - most tools now check for mistyped environment variables - gcc 10 is now supported - the memory safety checks are now disabled for a little more speed during fuzzing (only affects creating queue entries), can be toggled in config.h - afl-fuzz: - MOpt out of bounds writing crash fixed - now prints the real python version support compiled in - set stronger performance compile options and little tweaks - Android: prefer bigcores when selecting a CPU - CmpLog forkserver - Redqueen input-2-state mutator (cmp instructions only ATM) - all Python 2+3 versions supported now - changed execs_per_sec in fuzzer_stats from "current" execs per second (which is pointless) to total execs per second - bugfix for dictionary insert stage count (fix via Google repo PR) - added warning if -M is used together with custom mutators with _ONLY option - AFL_TMPDIR checks are now later and better explained if they fail - llvm_mode - InsTrim: three bug fixes: 1. (minor) no pointless instrumentation of 1 block functions 2. (medium) path bug that leads a few blocks not instrumented that should be 3. (major) incorrect prev_loc was written, fixed! - afl-clang-fast: - show in the help output for which llvm version it was compiled for - now does not need to be recompiled between trace-pc and pass instrumentation. compile normally and set AFL_LLVM_USE_TRACE_PC :) - LLVM 11 is supported OBS-URL: https://build.opensuse.org/request/show/779147 OBS-URL: https://build.opensuse.org/package/show/devel:tools/afl?expand=0&rev=107 --- 2.60c.tar.gz | 3 --- 2.61c.tar.gz | 3 +++ afl.changes | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++++ afl.spec | 6 +++--- 4 files changed, 62 insertions(+), 6 deletions(-) delete mode 100644 2.60c.tar.gz create mode 100644 2.61c.tar.gz diff --git a/2.60c.tar.gz b/2.60c.tar.gz deleted file mode 100644 index 565755e..0000000 --- a/2.60c.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8b82c585c255f87536a7aef76da635d72675d75674dfc017dfe2e0d8d8bf397b -size 1215299 diff --git a/2.61c.tar.gz b/2.61c.tar.gz new file mode 100644 index 0000000..6e148b4 --- /dev/null +++ b/2.61c.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b7559811f4182d7f9cc80d4f70742b51fd58b2e11522db72fd044e6f80f760db +size 1268094 diff --git a/afl.changes b/afl.changes index 85c3324..8d7e933 100644 --- a/afl.changes +++ b/afl.changes @@ -1,3 +1,59 @@ +------------------------------------------------------------------- +Tue Feb 25 12:04:22 UTC 2020 - Marcus Meissner + +- updated to 2.61c + - use -march=native if available + - most tools now check for mistyped environment variables + - gcc 10 is now supported + - the memory safety checks are now disabled for a little more speed during + fuzzing (only affects creating queue entries), can be toggled in config.h + - afl-fuzz: + - MOpt out of bounds writing crash fixed + - now prints the real python version support compiled in + - set stronger performance compile options and little tweaks + - Android: prefer bigcores when selecting a CPU + - CmpLog forkserver + - Redqueen input-2-state mutator (cmp instructions only ATM) + - all Python 2+3 versions supported now + - changed execs_per_sec in fuzzer_stats from "current" execs per second + (which is pointless) to total execs per second + - bugfix for dictionary insert stage count (fix via Google repo PR) + - added warning if -M is used together with custom mutators with _ONLY option + - AFL_TMPDIR checks are now later and better explained if they fail + - llvm_mode + - InsTrim: three bug fixes: + 1. (minor) no pointless instrumentation of 1 block functions + 2. (medium) path bug that leads a few blocks not instrumented that + should be + 3. (major) incorrect prev_loc was written, fixed! + - afl-clang-fast: + - show in the help output for which llvm version it was compiled for + - now does not need to be recompiled between trace-pc and pass + instrumentation. compile normally and set AFL_LLVM_USE_TRACE_PC :) + - LLVM 11 is supported + - CmpLog instrumentation using SanCov (see llvm_mode/README.cmplog) + - afl-gcc, afl-clang-fast, afl-gcc-fast: + - experimental support for undefined behaviour sanitizer UBSAN + (set AFL_USE_UBSAN=1) + - the instrumentation summary output now also lists activated sanitizers + - afl-as: added isatty(2) check back in + - added AFL_DEBUG (for upcoming merge) + - qemu_mode: + - persistent mode is now also available for arm and aarch64 + - CmpLog instrumentation for QEMU (-c afl-fuzz command line option) + for x86, x86_64, arm and aarch64 + - AFL_PERSISTENT_HOOK callback module for persistent QEMU + (see examples/qemu_persistent_hook) + - added qemu_mode/README.persistent.md documentation + - AFL_ENTRYPOINT noew has instruction granularity + - afl-cmin is now a sh script (invoking awk) instead of bash for portability + the original script is still present as afl-cmin.bash + - afl-showmap: -i dir option now allows processing multiple inputs using the + forkserver. This is for enhanced speed in afl-cmin. + - added blacklist and whitelisting function check in all modules of llvm_mode + - added fix from Debian project to compile libdislocator and libtokencap + - libdislocator: AFL_ALIGNED_ALLOC to force size alignment to max_align_t + ------------------------------------------------------------------- Sun Feb 9 16:12:14 UTC 2020 - Marcus Meissner diff --git a/afl.spec b/afl.spec index 13f7896..703400e 100644 --- a/afl.spec +++ b/afl.spec @@ -17,7 +17,7 @@ Name: afl -Version: 2.60c +Version: 2.61c Release: 0 Summary: American fuzzy lop is a security-oriented fuzzer License: Apache-2.0 @@ -62,8 +62,8 @@ export AFL_NO_X86=1 make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir} MAN_PATH=%{_mandir}/man8 DESTDIR=%{buildroot} install %files -%license docs/COPYING -%doc docs/ChangeLog docs/README.* docs/*.txt +%license docs/COPYING LICENSE +%doc /usr/share/doc/packages/%name/ %{_bindir}/%{name}-* %dir %{_libexecdir}/%{name} %{_libexecdir}/%{name}/%{name}-as