花影

Results 11 comments of 花影

Hi, I already know that id is generated through `libafl_qemu_hook_edge_gen`->create_gen_wrapper->`gen_hashed_edge_ids`(in `StdEdgeCoverageChildModule`). Now I am debugging this part of code...

I found the process of calculating id and the intermediate value. The calculated id is indeed 0x4d5543f7dbc53456. Do you think there is a problem? ``` // src is 0x40a23030, dest...

I tried to change `id as usize` to (id as u16).try_into().unwrap(). This part is fine for now. (This is just a temporary solution.) But when I continued, the error `Unknown...

I found that in `parent` method of `GenericInProcessForkExecutorInner`, `waitpid` returned this error. This error, `Unknown error: Unix error: ECHILD`, means there is no child process. ```rust pub(super) fn parent(&mut self,...

@rmalmain Thank you for your reply. For the first question, my `LIBAFL_QEMU_EDGES_MAP_MASK_MAX` is 0xffff. About the second one, I write this fuzzer on an httpd program. There are many places...

About android fuzzer, I found a strange thing: The address of my `harnessDecode` is `harnessDecode @ 0xaaaaaaaabb70`. Another developer was able to successfully run the android fuzzer with asan, and...

> thank you for the detailed report. i just saw you closed the issue, is it because your problem is solved? No, I haven't solved it totally. I closed the...

Sorry for closing and opening the issue again, as this is my first time submitting an issue :)

I debugged further and found that in my colleague's machine, `mmap` syscall returns an address starting with 0x7fff, but mine returns 0xaaaaaaaab000. The allocate request are the same: both are...

I tried this code in two machines, and I got different results. ```c #include #include int main(void){ void* ptr = NULL; ptr = mmap(0xaaaaaaaab000, 16384, 0, 16418, -1, 0); printf("%p\n",...