Ivan Fratric

Results 256 comments of Ivan Fratric

"If the fuzzed program had heap OOB write and that write is handled by try/except block correctly without crashing, would it still be a vulnerability?" I'm not even sure how...

Going through UnhandledExceptionFilterWorth sounds like it would be worth a shot (again, DR messes with exceptions internally so hopefully the relevant stuff goes through), but I'd leave the current behavior...

I don't know what's causing the issue, but you could try getting a newer DynamoRIO version from https://github.com/DynamoRIO/dynamorio/releases and recompiling WinAFL with it.

First time I see this error, but in general, the pid file is created in https://github.com/googleprojectzero/winafl/blob/master/afl-fuzz.c#L2302 with -pidfile dynamorio flag. Perhaps instrumentation fails for some reason. These issues can be...

I'm not sure if this is related to this issue but your command line seems to be missing some required instrumentation flags (such as target module/function, number of function arguments...

Intel PT decoder requires knowledge of executable code within the process, so it saves executable code from modules when they are being loaded. Custom Intel PT decoder in WinAFL heavily...

Hi! You should try running your target under DynamoRIO without WinAFL. If the error persists, it means it's in DynamoRIO and not WinAFL and it's better to report it in...

Which Windows version, which CPU and are you running inside a VM?

Regarding Intel PT: Intel PT support in WinAFL is based on https://github.com/ionescu007/winipt, can you compile that and check if it works for you? You didn't write which version of Windows...

PT: And can you also check if the WinAFL precompiled binaries work for you? I didn't compile it anew, but I just confirmed that precompiled binaries still work correctly on...