Marcus Meissner
fce6476612
- updated to 4.08c
- afl-fuzz:
- new mutation engine: mutations that favor discovery more paths are
prefered until no new finds for 10 minutes then switching to mutations
that favor triggering crashes. Modes and switch time can be configured
with `-P`. Also input mode for the target can be defined with `-a` to
be `text` or `binary` (defaults to `generic`)
- new custom mutator that has the new afl++ engine (so it can easily
incorporated into new custom mutators), and also comes with a standalone
command line tool! See custom_mutators/aflpp/standalone/
- display the state of the fuzzing run in the UI :-)
- fix timeout setting if '+' is used or a session is restarted
- -l X option to enable base64 transformation solving
- allow to disable CMPLOG with '-c -' (e.g. afl.rs enforces '-c 0' on
every instance which is counterproductive).
- afl-cmin/afl-cmin.bash:
- fixed a bug inherited from vanilla AFL where a coverage of
map[123] = 11 would be the same as map[1123] = 1
- warn on crashing inputs
- adjust threads if less inputs than threads specified
- afl-cc:
- fixed an off-by-one instrumentation of iselect, hurting coverage a bit.
Thanks to @amykweon for spotting and fixing!
- @toka fixed a bug in laf-intel signed integer comparison splitting,
thanks a lot!!
- more LLVM compatability
- frida_mode:
- support for long form instrumentation on x86_x64 and arm64
- renamed utils/get_symbol_addr.sh to utils/frida_get_symbol_addr.sh
- qemu_mode:
OBS-URL: https://build.opensuse.org/request/show/1103817
OBS-URL: https://build.opensuse.org/package/show/devel:tools/afl?expand=0&rev=169
116 lines
3.7 KiB
RPMSpec
116 lines
3.7 KiB
RPMSpec
#
|
|
# spec file for package afl
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define afl_rt compiler-rt,llvm-rt,llvm-rt-lto
|
|
|
|
%ifarch %{arm} %ix86 s390x x86_64
|
|
%define afl_32 1
|
|
%endif
|
|
|
|
%ifarch aarch64 ppc64 ppc64le riscv64 s390x x86_64
|
|
%define afl_64 1
|
|
%endif
|
|
|
|
Name: afl
|
|
Version: 4.08c
|
|
Release: 0
|
|
Summary: American fuzzy lop is a security-oriented fuzzer
|
|
#URL: https://lcamtuf.coredump.cx/afl/
|
|
License: Apache-2.0
|
|
URL: https://github.com/AFLplusplus/AFLplusplus
|
|
Source: https://github.com/AFLplusplus/AFLplusplus/archive/v%{version}.tar.gz
|
|
Source1: afl-rpmlintrc
|
|
Patch1: afl-3.0c-fix-paths.patch
|
|
BuildRequires: gcc-c++
|
|
BuildRequires: (clang < 16 or clang15)
|
|
%ifarch x86_64
|
|
BuildRequires: gcc-32bit
|
|
%endif
|
|
%if %?suse_version >= 1550
|
|
BuildRequires: gcc-devel
|
|
%endif
|
|
BuildRequires: lld
|
|
BuildRequires: python3-devel
|
|
BuildRequires: ((llvm-devel >= 11.0.0 with llvm-devel < 16) or llvm15-devel)
|
|
Requires: lld
|
|
|
|
%description
|
|
American fuzzy lop is a security-oriented fuzzer that employs a novel type
|
|
of compile-time instrumentation and genetic algorithms to automatically
|
|
discover clean, interesting test cases that trigger new internal states in
|
|
the targeted binary. This substantially improves the functional coverage
|
|
for the fuzzed code. The compact synthesized corpora produced by the tool
|
|
are also useful for seeding other, more labor- or resource-intensive
|
|
testing regimes down the road.
|
|
|
|
Compared to other instrumented fuzzers, afl-fuzz is designed to be
|
|
practical: it has modest performance overhead, uses a variety of highly
|
|
effective fuzzing strategies and effort minimization tricks, requires
|
|
essentially no configuration, and seamlessly handles complex, real-world
|
|
use cases - say, common image parsing or file compression libraries.
|
|
|
|
%prep
|
|
%setup -q -n AFLplusplus-%version
|
|
%patch1 -p1
|
|
sed -i 's|#!/usr/bin/env sh|#!/bin/sh|g' afl-cmin
|
|
sed -i 's|#!/usr/bin/env bash|#!/bin/bash|g' afl-cmin.bash
|
|
|
|
%build
|
|
export CFLAGS="$CFLAGS %{optflags} -fno-lto"
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir}
|
|
# make radamsa
|
|
|
|
%install
|
|
%ifnarch %{ix86} x86_64
|
|
export AFL_NO_X86=1
|
|
%endif
|
|
make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_docdir} MAN_PATH=%{_mandir}/man8 DESTDIR=%{buildroot} install
|
|
chmod -x %{buildroot}/%{_libexecdir}/%{name}/*.o
|
|
|
|
%files
|
|
%license docs/COPYING LICENSE
|
|
%doc /usr/share/doc/packages/%name/
|
|
%{_bindir}/%{name}-*
|
|
%dir %{_libexecdir}/%{name}
|
|
%{_libexecdir}/%{name}/%{name}-as
|
|
%{_libexecdir}/%{name}/as
|
|
%if 0%{?afl_64}
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}-64.o
|
|
%endif
|
|
%if 0%{?afl_32}
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}-32.o
|
|
%endif
|
|
%ifarch aarch64
|
|
%{_libexecdir}/%{name}/afl-llvm-rt-lto-32.o
|
|
%endif
|
|
%{_libexecdir}/%{name}/afl-{%{afl_rt}}.o
|
|
%{_libexecdir}/%{name}/dynamic_list.txt
|
|
%{_libexecdir}/%{name}/*.so
|
|
%{_libexecdir}/%{name}/*.a
|
|
%dir %{_datadir}/%{name}
|
|
%dir %{_datadir}/%{name}/testcases
|
|
%{_datadir}/%{name}/testcases/*
|
|
%dir %{_datadir}/afl/dictionaries/
|
|
%{_datadir}/afl/dictionaries/*
|
|
%{_mandir}/man8/afl*.8*
|
|
|
|
%changelog
|