Marcus Meissner
8a00d60cba
- updated to 4.09c
- afl-fuzz:
- fixed the new mutation implementation for two bugs
- added `AFL_FINAL_SYNC` which forces a final fuzzer sync (also for `-F`)
before terminating.
- added AFL_IGNORE_SEED_PROBLEMS to skip over seeds that time out instead
of exiting with an error message
- allow -S/-M naming up to 50 characters (from 24)
- CMPLOG:
- added scale support (-l S)
- skip unhelpful insertions (u8)
- added --version and --help command line parameters
- fixed endless loop when reading malformed dictionaries
- new custom mutator function: post_run - thanks to yangzao!
- afl-whatsup:
- detect instanced that are starting up and show them as such as not dead
- now also shows coverage reached
- option -m shows only very relevant stats
- option -n will not use color in the output
- instrumentation:
- fix for a few string compare transform functions for LAF
- we are instrumenting __cxx internal functions again. this might break
a few targets, please report if so.
- frida_mode:
- fixes support for large map offsets
- support for AFL_FUZZER_LOOPCOUNT for afl.rs and LLVMFuzzerTestOneInput
- afl-cmin/afl-cmin.bash: prevent unneeded file errors
- added new tool afl-addseeds that adds new seeds to a running campaign
- added benchmark/benchmark.py if you want to see how good your fuzzing
speed is in comparison to other setups.
OBS-URL: https://build.opensuse.org/request/show/1133736
OBS-URL: https://build.opensuse.org/package/show/devel:tools/afl?expand=0&rev=171
116 lines
3.7 KiB
RPMSpec
116 lines
3.7 KiB
RPMSpec
#
|
|
# spec file for package afl
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define afl_rt compiler-rt,llvm-rt,llvm-rt-lto
|
|
|
|
%ifarch %{arm} %ix86 s390x x86_64
|
|
%define afl_32 1
|
|
%endif
|
|
|
|
%ifarch aarch64 ppc64 ppc64le riscv64 s390x x86_64
|
|
%define afl_64 1
|
|
%endif
|
|
|
|
Name: afl
|
|
Version: 4.09c
|
|
Release: 0
|
|
Summary: American fuzzy lop is a security-oriented fuzzer
|
|
#URL: https://lcamtuf.coredump.cx/afl/
|
|
License: Apache-2.0
|
|
URL: https://github.com/AFLplusplus/AFLplusplus
|
|
Source: https://github.com/AFLplusplus/AFLplusplus/archive/v%{version}.tar.gz
|
|
Source1: afl-rpmlintrc
|
|
Patch1: afl-3.0c-fix-paths.patch
|
|
BuildRequires: gcc-c++
|
|
BuildRequires: (clang < 16 or clang15)
|
|
%ifarch x86_64
|
|
BuildRequires: gcc-32bit
|
|
%endif
|
|
%if %?suse_version >= 1550
|
|
BuildRequires: gcc-devel
|
|
%endif
|
|
BuildRequires: lld
|
|
BuildRequires: python3-devel
|
|
BuildRequires: ((llvm-devel >= 11.0.0 with llvm-devel < 16) or llvm15-devel)
|
|
Requires: lld
|
|
|
|
%description
|
|
American fuzzy lop is a security-oriented fuzzer that employs a novel type
|
|
of compile-time instrumentation and genetic algorithms to automatically
|
|
discover clean, interesting test cases that trigger new internal states in
|
|
the targeted binary. This substantially improves the functional coverage
|
|
for the fuzzed code. The compact synthesized corpora produced by the tool
|
|
are also useful for seeding other, more labor- or resource-intensive
|
|
testing regimes down the road.
|
|
|
|
Compared to other instrumented fuzzers, afl-fuzz is designed to be
|
|
practical: it has modest performance overhead, uses a variety of highly
|
|
effective fuzzing strategies and effort minimization tricks, requires
|
|
essentially no configuration, and seamlessly handles complex, real-world
|
|
use cases - say, common image parsing or file compression libraries.
|
|
|
|
%prep
|
|
%setup -q -n AFLplusplus-%version
|
|
%patch1 -p1
|
|
sed -i 's|#!/usr/bin/env sh|#!/bin/sh|g' afl-cmin
|
|
sed -i 's|#!/usr/bin/env bash|#!/bin/bash|g' afl-cmin.bash
|
|
|
|
%build
|
|
export CFLAGS="$CFLAGS %{optflags} -fno-lto"
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir}
|
|
# make radamsa
|
|
|
|
%install
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir} MAN_PATH=%{_mandir}/man8 DESTDIR=%{buildroot} install
|
|
chmod -x %{buildroot}/%{_libexecdir}/%{name}/*.o
|
|
|
|
%files
|
|
%license docs/COPYING LICENSE
|
|
%doc /usr/share/doc/packages/%name/
|
|
%{_bindir}/%{name}-*
|
|
%dir %{_libexecdir}/%{name}
|
|
%{_libexecdir}/%{name}/%{name}-as
|
|
%{_libexecdir}/%{name}/as
|
|
%if 0%{?afl_64}
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}-64.o
|
|
%endif
|
|
%if 0%{?afl_32}
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}-32.o
|
|
%endif
|
|
%ifarch aarch64
|
|
%{_libexecdir}/%{name}/afl-llvm-rt-lto-32.o
|
|
%endif
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}.o
|
|
%{_libexecdir}/%{name}/dynamic_list.txt
|
|
%{_libexecdir}/%{name}/*.so
|
|
%{_libexecdir}/%{name}/*.a
|
|
%dir %{_datadir}/%{name}
|
|
%dir %{_datadir}/%{name}/testcases
|
|
%{_datadir}/%{name}/testcases/*
|
|
%dir %{_datadir}/afl/dictionaries/
|
|
%{_datadir}/afl/dictionaries/*
|
|
%{_mandir}/man8/afl*.8*
|
|
|
|
%changelog
|