qemuafl icon indicating copy to clipboard operation
qemuafl copied to clipboard

qemu cmplog+persistent mode race condition

Open vanhauser-thc opened this issue 4 years ago • 0 comments

In qemu_mode (3.1.1 and 5.1), when the cmplog mode is used together with persistent mode, a race condition can happen that leads to afl-fuzz unable to communicate to that cmplog target forkserver.

The race condition only occurs in low CPU issues, e.g. in docker containers that have a --cpus=1 setting.

as a temporary workaround persistent mode is deactivated in qemu_mode 5.1, 3.11 has no workaround.

vanhauser-thc avatar Sep 01 '20 15:09 vanhauser-thc