Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for AFL Persistent Mode #131

Closed
domenukk opened this issue Jan 14, 2018 · 3 comments
Closed

Add support for AFL Persistent Mode #131

domenukk opened this issue Jan 14, 2018 · 3 comments

Comments

@domenukk
Copy link

Great Project!
One problem I have is that startup for my binary is pretty slow.
The way I understood it, afl is given the actual binary to execute and will fork on _start.
Since the afl.rs api already wraps every call in a closure, it would map perfectly to Persistent Mode:
https://github.com/mirrorer/afl/blob/master/llvm_mode/README.llvm#L139
That way execution speed (at least the setup) should be a lot quicker.
A good middle ground might be the start the delayed fork server at the rust afl entrypoint.

@PaulGrandperrin
Copy link
Member

PaulGrandperrin commented Apr 23, 2018

Maybe you should try cargo-fuzz or honggfuzz-rs.

They both use persistent mode.

Disclaimer: I'm the author of honggfuzz-rs.

@PaulGrandperrin
Copy link
Member

Also I want to point out that I'm working on making this happen in AFL.rs.
I have a working version but the speedup is not that great...
For instance fuzzing url on my computer, using 1 thread:
AFL.rs w/o persistent mode: ~2000/s
AFL.rs w/ persistent mode: ~10000/s
Honggfuzz w/ persistent mode: ~ 60000/s

PaulGrandperrin added a commit to PaulGrandperrin/afl.rs that referenced this issue Apr 27, 2018
Performance goes from ~2200/s to 17000/s on my i7-7700HQ
while fuzzing the `url_read` target.

closes rust-fuzz#131
partially addresses rust-fuzz#31
@frewsxcv
Copy link
Member

Done in #137

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants