LibAFL
LibAFL copied to clipboard
Added qemu_tmin
Based on this. Seems to generate multiple outputs for each input though?
The qemu part looks legit to me, I don't get the multiple output part, you should find multiple testcases in the corpus as they are generated in each iteration of the tmin stage (cc @addisoncrump ) but pick only the smaller one IIRC
Only think I can think is I have glued the components together wrong? The baby_fuzzer_minimizing
I was copying seems to construct a state
without any feedback
here and then an executor
without any observers here, but if I try to copy that it doesn't seem to generate any output at all!?
I've managed to copy the baby_fuzzer_minimizing
more closely, and now it only seems to generate one output for each input. But it doesn't seem to actually minimize anything?! I modified one of the files in the corpus by simply appending 512Kb of zeroes to the end, so I would expect the minimizer to be able to easily reduce the size of that input even if it cannot reduce any of the others?
@addisoncrump can you take a look by any chance? You have the most minimizer experience
@addisoncrump ping