fuzzilli icon indicating copy to clipboard operation
fuzzilli copied to clipboard

Cannot check if crashes are detected

Open docfate111 opened this issue 4 years ago • 4 comments

What did I do wrong? Please help me.

Coverage] Initialized, 0 edges
[Fuzzer] Initialized
[Fuzzer] Cannot check if crashes are detected
[Fuzzer] Recommended timeout: at least 10ms. Current timeout: 250ms
[Fuzzer] Cannot receive FuzzIL output
[Fuzzer] Startup tests finished successfully

https://github.com/docfate111/mujs-fuzzilli/blob/main/main.c I made the REPL loop from the other targets and pseudocode. Is there any step I missed because I double-checked and it looks fine.

docfate111 avatar Feb 11 '21 07:02 docfate111

Fuzzilli can only check for crashes if you define crashTests in your profile, see e.g. here. Do you have those?

saelo avatar Feb 11 '21 08:02 saelo

Thanks I missed that. However I think there is something wrong with my REPL, the fuzzer runs but I am getting

[Coverage] Initialized, 0 edges
[Fuzzer] Initialized
[Fuzzer] Recommended timeout: at least 20ms. Current timeout: 250ms
[Fuzzer] Cannot receive FuzzIL output <============ ?????
[Fuzzer] Startup tests finished successfully

https://github.com/docfate111/mujs-fuzzilli/blob/main/main.c

docfate111 avatar Feb 11 '21 19:02 docfate111

Does your patch include support for the FUZZILLI_PRINT functionality (which should write the argument to REPRL_DWFD , see e.g. here). That's usually the problem when this warning appears.

saelo avatar Feb 12 '21 09:02 saelo

It does not. Is there supposed to be a javascript function that takes FUZZILLI_PRINT as an argument? Or do I just wait for the string to be in stdin? What do I return? Currently I have a JS function named "fuzzilli" that prints the argument after the string FUZZILLI_PRINT to the fuzzer file descriptor. https://github.com/docfate111/mujs-fuzzilli/blob/main/main.c

docfate111 avatar Feb 13 '21 01:02 docfate111

I assume this issue is no longer active, but feel free to reopen!

saelo avatar Feb 02 '23 15:02 saelo