Skip to content

Latest commit

 

History

History

fuzzers

Folders and files

README.md

Intro

  • aixcc-jazzer -> link to AIxCC official Jazzer repo
  • atl-jazzer -> Team Atlanta Jazzer
  • atl-libafl-jazzer -> Jazzer frontend for libAFL-based Jazzer
  • jazzer-libafl -> libAFL backend for libAFL-based Jazzer

Feature list of atl-jazzer

Feature PRs/Commits (With link) Comment
set timeout upper bound to 1s for java.nio.channels.SocketChannel.connect commit-33a673 -
GEP value profile guidance on InputStream PR-104, PR-105 -
Disable LLVMFuzzerCustomMutator and LLVMFuzzerCustomCrossOver PR-111 -
(WIP) Add codemarker instrumentation for beep seed collection in exploitation workflow PR-113 New cmdline options --xcode & --beep_seed_dir for Jazzer
Fix sanitizer funcs hook failures (. -> /, Sting -> String, String -> String[]) PR-114 This exist in any Jazzer, fails the hook of some funcs in LdapInjection and RegexInjection
Add cpmeta beepseeds for cp harness meta inference commit-5536f3 Do codemarker instrumentation to init and entry point func when ATLJAZZER_INFER_CPMETA_OUTPUT is set, for harness meta data inference
Supp reload in libafl-Jazzer commit-455825 Support reload feature in libafl-Jazzer
Supp custom sink point list in Atl-/libafl-Jazzer commit-83f2e4 now we can specify coord or APIs for extending the sinkpoint
Fix Atl-/libafl-Jazzer len_control issue PR-307 commit-5196e2 commit-f6a09a len_control has bugs when disabling custom mutator
Add OOFMutator to ATL-Jazzer PR-307 OOFMutator for accepting out of fuzzer seeds such as from libDeepGen
Port dict reload back to ATL-Jazzer PR-310 ATL-Jazzer auto-reload dict
Add corpus coverage reproduction mode to ATL-Jazzer commit-c047bd Sort corpus by mtime and output coverage after each seed when ATLJAZZER_COV_REPRO_BASE_TIMESTAMP is set, useful for tracking coverage growth over time with -runs=0