fuzzware

fuzzware copied to clipboard

Invalid instruction - ARM TrustZone Cortex-m33

4

### Target The firmware I am trying to fuzz is compiled for the following targe : Manufacturer : STMicro Board : U-585i Architecture : cortex-m33 (+TrustZone) ### Setup Fuzzware has...

Servax314

Unexpected Files in base_inputs and Signa6 Error During Crash Input Analysis in Fuzzware

4

Dear author: ## Issue Description I am encountering two issues while using Fuzzware for firmware simulation: ### Issue 1: Unexpected Files in base_inputs Directory After specifying the fuzz testing input,...

zhangpwxwk

Unable to identify BB 0x80002a0 in uEmu.3Dprinter

6

Hi, I encountered an issue when running Fuzzware on uEmu.3Dprinter. Fuzzware seems unable to list BB 0x80002a0 in the BB trace/set of a test case that covers this BB. As...

B03901108

Replace "target" with a checkpoint system

1

Currently, fuzzware supports the definition of a "target". A "target" is a point in the program that needs to be discovered once, and from then on, the fuzzing prefix to...

smnhff

Missing "address-of" operator & in arm_reg_ptr function.

2

It looks to me that the arm_reg_ptr function is getting the reference of arm registers, but the reference operator & is missing when handling registers from R0 to R12 and...

enlighten5

emulate error

4

Hello Tobi: When I emulate my firmware, some errors occor. fuzzware emu -c config.yml -v -d -M IPMI_F407.bin >emu.log The errors: Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358...

zhangpwxwk

`fuzzware cov -n 5` allows printing multiple files which cover a specific basic block. However, the default is `-n 1`, which leads to the user to believe that only one...

Scepticz

Fuzzware sometimes stops generating traces

1

I've noticed occasionally after running the pipeline, that genstats will cause a large number of traces to be generated. They all seem to correspond to the final main folder. The...

CounterCycle

More handlers

1

Two suggestions for handlers: Fuzz Return: Sometimes it would be nice to fuzz the return value of a function instead of replacing it with a static value. I've prototyped this...

YSaxon

Unexpected pipeline exit in AFL++ mode after modelling

2

Hello, I've been doing some testing with AFL++ after the fixes done in issue #7, thanks for resolving that. I've encountered a couple of additional issues. Most significantly, some pipeline...

CounterCycle