American fuzzy lop is a security-oriented fuzzer

Edit Package afl
http://lcamtuf.coredump.cx/afl/

American fuzzy lop is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary. This substantially improves the functional coverage for the fuzzed code. The compact synthesized corpora produced by the tool are also useful for seeding other, more labor- or resource-intensive testing regimes down the road.

Compared to other instrumented fuzzers, afl-fuzz is designed to be practical: it has modest performance overhead, uses a variety of highly effective fuzzing strategies and effort minimization tricks, requires essentially no configuration, and seamlessly handles complex, real-world use cases - say, common image parsing or file compression libraries.

Refresh
Refresh
Source Files
Filename Size Changed
afl-3.0c-fix-paths.patch 0000000972 972 Bytes
afl-rpmlintrc 0000000725 725 Bytes
afl.changes 0000114620 112 KB
afl.spec 0000003809 3.72 KB
v4.10c.tar.gz 0002955420 2.82 MB
Latest Revision
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1144630 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 81)
- updated to 4.10c
  - afl-fuzz:
    - default power schedule is now EXPLORE, due a fix in fast schedules
      explore is slightly better now.
    - fixed minor issues in the mutation engine, thanks to @futhewo for
      reporting!
    - better deterministic fuzzing is now available, benchmarks have shown
      to improve fuzzing. Enable with -D. Thanks to @kdsjZh for the PR!
  - afl-cc:
    - large rewrite by @SonicStark which fixes a few corner cases, thanks!
    - LTO mode now requires llvm 12+
    - workaround for ASAN with gcc_plugin mode
  - instrumentation:
    - LLVM 18 support, thanks to @devnexen!
    - Injection (SQL, LDAP, XSS) fuzzing feature now available, see
      `instrumentation/README.injections.md` how to activate/use/expand.
    - compcov/LAF-intel:
      - floating point splitting bug fix by @hexcoder
      - due a bug in LLVM 17 integer splitting is disabled there!
      - when splitting floats was selected, integers were always split as well,
        fixed to require AFL_LLVM_LAF_SPLIT_COMPARES or _ALL as it should
    - dynamic instrumentation filtering for LLVM NATIVE, thanks @Mozilla!
      see utils/dynamic_covfilter/README.md
  - qemu_mode:
    - plugins are now activated by default and a new module is included that
      produces drcov compatible traces for lighthouse/lightkeeper/...
      thanks to @JRomainG to submitting!
  - updated Nyx checkout (fixes a bug) and some QOL
  - updated the custom grammar mutator
  - document afl-cmin does not work on macOS (but afl-cmin.bash does) (forwarded request 1144629 from msmeissn)
Comments 0
openSUSE Build Service is sponsored by