From 2b75b08ec65562930de34b5a0a14c7d2fb871ab7eddb51fd6d37129a047f2009 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Thu, 25 Aug 2016 13:19:30 +0000 Subject: [PATCH] Accepting request 422107 from home:msmeissn:branches:devel:tools - Version 2.32b: - Added a check for AFL_HARDEN combined with AFL_USE_*SAN. Suggested by Hanno Boeck. - Made several other cosmetic adjustments to cycle timing in the wake of the big tweak made in 2.31b. - Version 2.31b: - Changed havoc cycle counts for a marked performance boost, especially with -S / -d. See the discussion of FidgetyAFL in: https://groups.google.com/forum/#!topic/afl-users/fOPeb62FZUg While this does not implement the approach proposed by the authors of the CCS paper, the solution is a result of digging into that research; more improvements may follow as I do more experiments and get more definitive data. - Version 2.30b: - Made minor improvements to persistent mode to avoid the remote possibility of "no instrumentation detected" issues with very low instrumentation densities. - Fixed a minor glitch with a leftover process in persistent mode. Reported by Jakub Wilk and Daniel Stender. - Made persistent mode bitmaps a bit more consistent and adjusted the way this is shown in the UI, especially in persistent mode. - Version 2.29b: - Made a minor #include fix to llvm_mode. Suggested by Jonathan Metzman. - Made cosmetic updates to the docs. - Version 2.28b: - Added "life pro tips" to docs/. - Moved testcases/_extras/ to dictionaries/ for visibility. - Made minor improvements to install scripts. - Added an important safety tip. - Version 2.27b: - Added libtokencap, a simple feature to intercept strcmp / memcmp and generate dictionary entries that can help extend coverage. OBS-URL: https://build.opensuse.org/request/show/422107 OBS-URL: https://build.opensuse.org/package/show/devel:tools/afl?expand=0&rev=68 --- afl-1.58b-fix-paths.patch | 10 +++---- afl-2.21b.tgz | 3 -- afl-2.32b.tgz | 3 ++ afl.changes | 63 +++++++++++++++++++++++++++++++++++++++ afl.spec | 4 ++- 5 files changed, 74 insertions(+), 9 deletions(-) delete mode 100644 afl-2.21b.tgz create mode 100644 afl-2.32b.tgz diff --git a/afl-1.58b-fix-paths.patch b/afl-1.58b-fix-paths.patch index 78e2118..6a7fcbf 100644 --- a/afl-1.58b-fix-paths.patch +++ b/afl-1.58b-fix-paths.patch @@ -2,11 +2,11 @@ Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) -Index: afl-2.05b/Makefile +Index: afl-2.32b/Makefile =================================================================== ---- afl-2.05b.orig/Makefile -+++ afl-2.05b/Makefile -@@ -18,8 +18,8 @@ VERSION = 2.05b +--- afl-2.32b.orig/Makefile ++++ afl-2.32b/Makefile +@@ -18,8 +18,8 @@ VERSION = $(shell grep '^\#define VE PREFIX ?= /usr/local BIN_PATH = $(PREFIX)/bin @@ -16,4 +16,4 @@ Index: afl-2.05b/Makefile +DOC_PATH = $(DOC_DIR)/afl MISC_PATH = $(PREFIX)/share/afl - # PROGS intentionally omit afl-as, which gets installed to its own dir. + # PROGS intentionally omit afl-as, which gets installed elsewhere. diff --git a/afl-2.21b.tgz b/afl-2.21b.tgz deleted file mode 100644 index cd42ca3..0000000 --- a/afl-2.21b.tgz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7b6754dd0cad57ee00c0f6cec18fba84ab54858cafb79ce5f4c03ab989777c0e -size 818316 diff --git a/afl-2.32b.tgz b/afl-2.32b.tgz new file mode 100644 index 0000000..ae3995f --- /dev/null +++ b/afl-2.32b.tgz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3d08b79e28c2075aec20aa6e6240f9f6fb7af3d29200b498e908f8b3960a7b79 +size 828474 diff --git a/afl.changes b/afl.changes index 62fbc90..d09d1b8 100644 --- a/afl.changes +++ b/afl.changes @@ -1,3 +1,66 @@ +------------------------------------------------------------------- +Thu Aug 25 12:45:55 UTC 2016 - meissner@suse.com + +- Version 2.32b: + - Added a check for AFL_HARDEN combined with AFL_USE_*SAN. Suggested by Hanno Boeck. + - Made several other cosmetic adjustments to cycle timing in the wake of the big tweak made in 2.31b. + +- Version 2.31b: + - Changed havoc cycle counts for a marked performance boost, especially + with -S / -d. See the discussion of FidgetyAFL in: + + https://groups.google.com/forum/#!topic/afl-users/fOPeb62FZUg + + While this does not implement the approach proposed by the authors of + the CCS paper, the solution is a result of digging into that research; + more improvements may follow as I do more experiments and get more + definitive data. +- Version 2.30b: + - Made minor improvements to persistent mode to avoid the remote + possibility of "no instrumentation detected" issues with very low + instrumentation densities. + - Fixed a minor glitch with a leftover process in persistent mode. + Reported by Jakub Wilk and Daniel Stender. + - Made persistent mode bitmaps a bit more consistent and adjusted the way + this is shown in the UI, especially in persistent mode. + +- Version 2.29b: + - Made a minor #include fix to llvm_mode. Suggested by Jonathan Metzman. + - Made cosmetic updates to the docs. +- Version 2.28b: + - Added "life pro tips" to docs/. + - Moved testcases/_extras/ to dictionaries/ for visibility. + - Made minor improvements to install scripts. + - Added an important safety tip. +- Version 2.27b: + - Added libtokencap, a simple feature to intercept strcmp / memcmp and + generate dictionary entries that can help extend coverage. + - Moved libdislocator to its own dir, added README. + - The demo in experimental/instrumented_cmp is no more. +- Version 2.26b: + - Made a fix for libdislocator.so to compile on MacOS X. + - Added support for DYLD_INSERT_LIBRARIES. + - Renamed AFL_LD_PRELOAD to AFL_PRELOAD. +- Version 2.25b: + - Made some cosmetic updates to libdislocator.so, renamed one env + variable. +- Version 2.24b: + - Added libdislocator.so, an experimental, abusive allocator. Try + it out with AFL_LD_PRELOAD=/path/to/libdislocator.so when running + afl-fuzz. +- Version 2.23b: + - Improved the stability metric for persistent mode binaries. Problem + spotted by Kurt Roeckx. + - Made a related improvement that may bring the metric to 100% for those + targets. +- Version 2.22b: + - Mentioned the potential conflicts between MSAN / ASAN and FORTIFY_SOURCE. + There is no automated check for this, since some distros may implicitly + set FORTIFY_SOURCE outside of the compiler's argv[]. + - Populated the support for AFL_LD_PRELOAD to all companion tools. + - Made a change to the handling of ./afl-clang-fast -v. Spotted by + Jan Kneschke. + ------------------------------------------------------------------- Sat Jul 23 19:10:30 UTC 2016 - astieger@suse.com diff --git a/afl.spec b/afl.spec index 157f469..7b4fb0b 100644 --- a/afl.spec +++ b/afl.spec @@ -17,7 +17,7 @@ Name: afl -Version: 2.21b +Version: 2.32b Release: 0 Summary: American fuzzy lop is a security-oriented fuzzer License: Apache-2.0 @@ -56,5 +56,7 @@ make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_doc %dir %{_datadir}/%{name} %dir %{_datadir}/%{name}/testcases %{_datadir}/%{name}/testcases/* +%dir /usr/share/afl/dictionaries/ +/usr/share/afl/dictionaries/* %changelog