Marcus Meissner
ba968407c1
- updated to 2.63c
- all:
- big code changes to make afl-fuzz thread-safe so afl-fuzz can spawn
multiple fuzzing threads in the future or even become a library
- afl basic tools now report on the environment variables picked up
- more tools get environment variable usage info in the help output
- force all output to stdout (some OK/SAY/WARN messages were sent to
stdout, some to stderr)
- uninstrumented mode uses an internal forkserver ("fauxserver")
- now builds with `-D_FORTIFY_SOURCE=2`
- drastically reduced number of (de)allocations during fuzzing
- afl-fuzz:
- python mutator modules and custom mutator modules now use the same
interface and hence the API changed
- AFL_AUTORESUME will resume execution without the need to specify `-i -`
- added experimental power schedules (-p):
- mmopt: ignores runtime of queue entries, gives higher weighting to
the last 5 queue entries
- rare: puts focus on queue entries that hits rare branches, also ignores
runtime
- llvm_mode:
- added SNAPSHOT feature (using https://github.com/AFLplusplus/AFL-Snapshot-LKM)
- added Control Flow Integrity sanitizer (AFL_USE_CFISAN)
- added AFL_LLVM_INSTRUMENT option to control the instrumentation type
easier: DEFAULT, CFG (INSTRIM), LTO, CTX, NGRAM-x (x=2-16)
- made USE_TRACE_PC compile obsolete
- LTO collision free instrumented added in llvm_mode with afl-clang-lto -
note that this mode is amazing, but quite some targets won't compile
- Added llvm_mode NGRAM prev_loc coverage by Adrean Herrera
(https://github.com/adrianherrera/afl-ngram-pass/), activate by setting
OBS-URL: https://build.opensuse.org/request/show/793419
OBS-URL: https://build.opensuse.org/package/show/devel:tools/afl?expand=0&rev=111
82 lines
2.8 KiB
RPMSpec
82 lines
2.8 KiB
RPMSpec
#
|
|
# spec file for package afl
|
|
#
|
|
# Copyright (c) 2020 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: afl
|
|
Version: 2.63c
|
|
Release: 0
|
|
Summary: American fuzzy lop is a security-oriented fuzzer
|
|
License: Apache-2.0
|
|
URL: http://lcamtuf.coredump.cx/afl/
|
|
Source: https://github.com/vanhauser-thc/AFLplusplus/archive/%{version}.tar.gz
|
|
Source1: afl-rpmlintrc
|
|
Patch1: afl-2.63c-fix-paths.patch
|
|
BuildRequires: gcc-c++
|
|
|
|
%description
|
|
American fuzzy lop is a security-oriented fuzzer that employs a novel type
|
|
of compile-time instrumentation and genetic algorithms to automatically
|
|
discover clean, interesting test cases that trigger new internal states in
|
|
the targeted binary. This substantially improves the functional coverage
|
|
for the fuzzed code. The compact synthesized corpora produced by the tool
|
|
are also useful for seeding other, more labor- or resource-intensive
|
|
testing regimes down the road.
|
|
|
|
Compared to other instrumented fuzzers, afl-fuzz is designed to be
|
|
practical: it has modest performance overhead, uses a variety of highly
|
|
effective fuzzing strategies and effort minimization tricks, requires
|
|
essentially no configuration, and seamlessly handles complex, real-world
|
|
use cases - say, common image parsing or file compression libraries.
|
|
|
|
%prep
|
|
%setup -q -n AFLplusplus-%version
|
|
%patch1 -p1
|
|
sed -i 's|#!/usr/bin/env bash|#!/bin/bash|g' afl-cmin
|
|
|
|
%build
|
|
export CFLAGS="$CFLAGS %{optflags}"
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir}
|
|
make radamsa
|
|
|
|
%install
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir} MAN_PATH=%{_mandir}/man8 DESTDIR=%{buildroot} install
|
|
|
|
%files
|
|
%license docs/COPYING LICENSE
|
|
%doc /usr/share/doc/packages/%name/
|
|
%{_bindir}/%{name}-*
|
|
%dir %{_libexecdir}/%{name}
|
|
%{_libexecdir}/%{name}/%{name}-as
|
|
%{_libexecdir}/%{name}/as
|
|
#{_libexecdir}/%{name}/argvfuzz*.so
|
|
#{_libexecdir}/%{name}/socketfuzz*.so
|
|
%{_libexecdir}/%{name}/libradamsa.so
|
|
%dir %{_datadir}/%{name}
|
|
%dir %{_datadir}/%{name}/testcases
|
|
%{_datadir}/%{name}/testcases/*
|
|
%dir %{_datadir}/afl/dictionaries/
|
|
%{_datadir}/afl/dictionaries/*
|
|
%{_mandir}/man8/afl*.8*
|
|
|
|
%changelog
|