Skip to content
This repository was archived by the owner on Aug 23, 2024. It is now read-only.
This repository was archived by the owner on Aug 23, 2024. It is now read-only.

Can you explain the fuzzer_stats and the command_line used? #26

@Picasso-r

Description

@Picasso-r

Hello @thdusdl1219 @tarafans .I actually get everything working. But I have some questions to help me understand more about DIE.

Here is my fuzzer_stats file:

cat fuzzer_stats
start_time        : 1719463042
last_update       : 1719470780
fuzzer_pid        : 755288
cycles_done       : 0
execs_done        : 95763
execs_per_sec     : 2.03
paths_total       : 0
paths_favored     : 0
paths_found       : 0
paths_imported    : 0
max_depth         : 0
cur_path          : 957
pending_favs      : 0
pending_total     : 0
variable_paths    : 0
stability         : 100.00%
bitmap_cvg        : 0.00%
unique_crashes    : 0
unique_hangs      : 0
last_path         : 0
last_crash        : 0
last_hang         : 0
execs_since_crash : 95763
exec_timeout      : 1000
afl_banner        : d8
afl_version       : 2.52b
target_mode       : crash 
command_line      : ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/lib.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/jsc.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/v8.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/ffx.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/chakra.js @@

I have two questions.

  1. I find that most numbers are 0, I think this is wired. Is this correct? Or is there anything wrong with instrument or coverage collection?

  2. The command line is so long and I can't figure out the function of lib.js, v8.js ... Can I just remove them like:
    ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 @@
    And I can't figure out where to set the flags of v8 such as --allow-natives-syntax, --expose-gc ... Should I add them manually like:
    ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 --allow-natives-syntax --expose-gc @@

Thanks veryyy much.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions