kAFL icon indicating copy to clipboard operation
kAFL copied to clipboard

In the kafl windows target, using the Sleep() function after a snapshot recovery seems to cause the client to stop running

Open nj00001 opened this issue 1 year ago • 0 comments

Modifying the windows sample program selffuzz_test directly should reproduce the problem

    kAFL_hypercall(HYPERCALL_KAFL_NEXT_PAYLOAD, 0);
    kAFL_hypercall(HYPERCALL_KAFL_ACQUIRE, 0);
    
    fuzzme(payload_buffer->data, payload_buffer->size);
    Sleep(1);
    kAFL_hypercall(HYPERCALL_KAFL_RELEASE, 0);

image

The result is that every fuzz results in a timeout. And in my tests, many functions with hibernation cause this problem, such as Sleep(), select(), MsgWaitForMultipleObjectsEx(). This is actually quite a serious problem, since many programs use sleep or blocking to synchronize in one way or another.

nj00001 avatar May 09 '24 06:05 nj00001