Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minimize fuzz corpora with all fuzz engines used for fuzzing #167

Open
dergoegge opened this issue Jul 2, 2024 · 0 comments
Open

Minimize fuzz corpora with all fuzz engines used for fuzzing #167

dergoegge opened this issue Jul 2, 2024 · 0 comments

Comments

@dergoegge
Copy link
Member

At the moment, our script for minimizing the fuzz corpora only uses libFuzzer. Not minimizing with the same engines that we use for fuzzing will lead to coverage loss each time we minimize, because the engines differ in the way they collect coverage (e..g libFuzzer uses llvm's pc-guard but afl++ has it's own plugins).

(I need to find a source other than word of mouth on this but llvm's pc-guard apparently under reports coverage quite heavily due to missing support for instrumenting iselect expressions).

We should extend the script to minimize with afl++ and honggfuzz as well.

fanquake added a commit that referenced this issue Sep 4, 2024
56730ca delete_nonreduced_fuzz_inputs: also reduce with afl-cmin (dergoegge)
75c040f delete_nonreduced_fuzz_inputs: use llvm 18 (dergoegge)

Pull request description:

  * Use llvm 18
  * Minimize corpora with both afl++ and libfuzzer (#167)

ACKs for top commit:
  maflcko:
    tested ACK 56730ca

Tree-SHA512: d3b6b4a40b55ee012392f21fe68776b1c101b4820fac5b49db1d1cb292ac87e474acd96f35bb4de3dc6e821042726e067e5261d89ed30b79ccb014741360b3fd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant