van Hauser

whishlist: strace

2

if you could add strace to the list of binaries - that would be awesome! :)

busybox and other cat tools do not have -v, added a check if the option is present ``` --- bin/execsnoop +++ bin/execsnoop @@ -58,6 +58,7 @@ tracing=/sys/kernel/debug/tracing flock=/var/tmp/.ftrace-lock; wroteflock=0 opt_duration=0;...

More documentation please

1

Will you add more documentation? ;)

PIN 3.10 changed the API and afl-pin does not compile anymore. todo: put in some #if's to handle this. low priority for me so a patch is welcome

Please provide a real world example

3

The README does not tell how this is to be used with a project and instead points to a build_all script, which then needs to be further analyzed how it...

atoi() is not solved

1

Example: ``` #include #include #include #include #include #include #include #include #include #include #define bail(msg, pos) \ while (1) { \ \ fprintf(stderr, "%s at %u\n", (char *)msg, (uint32_t)pos); \ return...

Total max runtime

4

I am running a concolic solver benchmark on fuzzbench with symcc, symqemu, fuzzolic and eclipser: https://www.fuzzbench.com/reports/experimental/2021-07-03-symbolic/index.html I try to make this as fair as possible, last issue though is the...

Path not found

4

This example file: ``` #include #include #include #include #include #include int main(int argc, char *argv[]) { char buf[1024]; ssize_t i; if ((i = read(0, buf, sizeof(buf) - 1)) < 24)...

Allow solve time granted to be in an env var

2

A critical success factor for symbolic solving is the time given to solve. currently this is hardcoded in the qsym backend code that is called and is set to 5...

symcc_fuzzing_helper SYMCC_AFL_COVERAGE_MAP doesnt work

2

so that the coverage map generated by afl-showmap and used by symcc is correct the exact same instrumentation has to be in the afl-fuzz binary as in the symcc instrumented...