fuzzware icon indicating copy to clipboard operation
fuzzware copied to clipboard

emulate error

Open zhangpwxwk opened this issue 1 year ago • 4 comments

Hello Tobi: When I emulate my firmware, some errors occor. fuzzware emu -c config.yml -v -d -M IPMI_F407.bin >emu.log The errors: Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Basic Block: addr= 0x0000000008001358 (lr=0x0) Fuzzing input not consumed for 150000 basic blocks, exiting [FORKSERVER SETUP] It looks like we are not running under AFL, going for single input [ERROR] Could not retrieve the number of required ticks during discovery forking

The mcu I use is GD32F407 compatible with stm32f407.
I check the source code of my firm, I get the assembly code:
 /* Copy the data segment initializers from flash to SRAM */  
 movs  r1, #0
 b  LoopCopyDataInit

 CopyDataInit:
 ldr  r3, =_sidata
 ldr  r3, [r3, r1]
 str  r3, [r0, r1]
 adds  r1, r1, #4

LoopCopyDataInit: ldr r0, =_sdata ldr r3, =_edata adds r2, r0, r1 cmp r2, r3 bcc CopyDataInit ldr r2, =_sbss b LoopFillZerobss

    Should I change the limit of fuzz_consumption_timeout(150000) ?     Do you have any good Ideas?

Best ZP

zhangpwxwk avatar Sep 23 '23 12:09 zhangpwxwk