JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
25151bcbb6
nixpkgs/pkgs/tools/security/afl/README.md

20 lines
773 B
Markdown
Raw Normal View History

nixpkgs: afl - add QEMU support This adds support for `afl-fuzz -Q`, which can be used to instrument arbitrary black-box binary code for fuzz testing using American Fuzzy Lop through QEMU emulation. This requires a custom QEMU 2.2.0 build of the Linux userspace emulators (system emulators aren't required) with some custom patches. Furthermore we have to patch the patches a little to make the build more sane (there are some notes in the README about this). Overall, the addition of this feature by default doesn't significantly impact build times (since building QEMU for only one target builds only a fraction of the source code, and many features are disabled), so it's enabled by default. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-03-23 02:57:55 +00:00
Updating the QEMU patches
=========================
When updating to the latest American Fuzzy Lop, make sure to check for
any new patches to qemu for binary fuzzing support:
afl: 2.52b -> 2.56b can remove qemu glibc patch as it is now covered by afl's own patches
2019-12-21 13:50:23 +00:00
https://github.com/google/AFL/tree/master/qemu_mode
nixpkgs: afl - add QEMU support This adds support for `afl-fuzz -Q`, which can be used to instrument arbitrary black-box binary code for fuzz testing using American Fuzzy Lop through QEMU emulation. This requires a custom QEMU 2.2.0 build of the Linux userspace emulators (system emulators aren't required) with some custom patches. Furthermore we have to patch the patches a little to make the build more sane (there are some notes in the README about this). Overall, the addition of this feature by default doesn't significantly impact build times (since building QEMU for only one target builds only a fraction of the source code, and many features are disabled), so it's enabled by default. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-03-23 02:57:55 +00:00
Be sure to check the build script and make sure it's also using the
right QEMU version and options in `qemu.nix`:
afl: 2.52b -> 2.56b can remove qemu glibc patch as it is now covered by afl's own patches
2019-12-21 13:50:23 +00:00
https://github.com/google/AFL/blob/master/qemu_mode/build_qemu_support.sh
nixpkgs: afl - add QEMU support This adds support for `afl-fuzz -Q`, which can be used to instrument arbitrary black-box binary code for fuzz testing using American Fuzzy Lop through QEMU emulation. This requires a custom QEMU 2.2.0 build of the Linux userspace emulators (system emulators aren't required) with some custom patches. Furthermore we have to patch the patches a little to make the build more sane (there are some notes in the README about this). Overall, the addition of this feature by default doesn't significantly impact build times (since building QEMU for only one target builds only a fraction of the source code, and many features are disabled), so it's enabled by default. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-03-23 02:57:55 +00:00
nixpkgs: afl 1.58b -> 1.63b - Adds new LLVM-based instrumentation support via afl-clang-fast. - Experimental support for cgroup management via afl-cgroup, to mitigate OOM issues when using afl with address sanitizer. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2015-04-11 12:43:25 +01:00
`afl-config.h`, `afl-types.h`, and `afl-qemu-cpu-inl.h` are part of
the afl source code, and copied from `config.h`, `types.h` and
`afl-qemu-cpu-inl.h` appropriately. These files and the QEMU patches
need to be slightly adjusted to fix their `#include`s (the patches
try to otherwise include files like `../../config.h` which causes the
build to fail).
Reference in New Issue Copy Permalink