Andrea Fioraldi

Frida doesn't catch Java exceptions in Java hooks

1

Frida ignore Java exception generated by NativeFunction calls and propagate (so setExceptionHandler miss them) and le the app crash when the exception is generated by the app itself. Here an...

Port trim_case() from AFL++

1

from @tokatoka

Implement State save restore to disk on SIGINT to allow to stop and resume a fuzzer

6

We should implement the handler for posix and windows and extend it to work with multiple processes when using a launcher

in SimpleRestartingEventManager the execution count should be restored after respawn

5


Integrate the fuzzers in libafl_fuzzbench as libafl_sugar modules

1

libafl_sugar it is a crate that should provide ready-to-use fuzzers configurable with a builder pattern. We have a collection of fuzzers in https://github.com/AFLplusplus/libafl_fuzzbench, would be cool to have them (or...

Proposed projects

8

In this issue, I proposed several projects based on libafl (like libafl_frida) that we would be glad to include here. As LibAFL is newly born there is a lot of...

Find a mechanism to enforce Metadata dependencies

1

At the current state, we don't have any mechanism to enforce the presence of some testcase or state metadata apart from returning errors at runtime when one component that needs...

High level Sugar API

2

We need high level API to create basic fuzzers for basic users without involving the concept of Observer Feedback etc. Ideally just taking an haress closure and some parameters like...

Suggest a research: we are implementing impactful fuzzing algorithms in the lib as ready-to-use components

1

The literature on fuzz testing is *quite* large [1], and we can miss interesting works that are worth having implemented here (or in AFL++). This issue is for the community,...

Build system

6

If libafl has to be multi platform, we cannot really use just GNU makefiles. I propose meson as it was recently adopted by QEMU it and seems a sane build...