4 ms·
This configuration command prior to make worked for me on Linux: ./configure --disable-shared CC="afl-gcc" It calls the AFL GCC compiler instead, which pr
by snerbles 9y ago
This configuration command prior to make worked for me on Linux:
./configure --disable-shared CC="afl-gcc"
It calls the AFL GCC compiler instead, which presumably injects instrumentation.
- xhrpost 9y agoThanks! Got that part working. How can you tell if djpeg exits 0 for a given queue item?
- jagger11 9y agoI'm not sure if it's required (to know the exit code). inputs, both valid and invalid, will activate various paths in djpeg/libjpeg, and that's the basic goal here. In case you'd like to test persistent fuzzing (should be faster due to a few factors), you can try modifying https://github.com/google/honggfuzz/blob/master/examples/libjpeg/persistent-jpeg.c https://github.com/google/honggfuzz/blob/master/examples/lib... - it will probably take creating main() func which will read data in the AFL_LOOP() loop and call LLVMFuzzerTestOneInput with that input.
- xhrpost 9y agoMy goal with the exit code is that (I think) an exit of 0 would mean that a valid JPEG image was found.