<revisionlist>

  <revision rev="1" vrev="1">

    <srcmd5>8c35c9fb0cbd1855c6f3683d1814f113</srcmd5>

    <version>1.57b</version>

    <time>1427313922</time>

    <user>dimstar_suse</user>

    <comment>add the american fuzzing language</comment>

    <requestid>292839</requestid>

  </revision>

  <revision rev="2" vrev="1">

    <srcmd5>bc784d240d219222f391be78b7df434f</srcmd5>

    <version>1.58b</version>

    <time>1427736796</time>

    <user>dimstar_suse</user>

    <comment>afl 1.58b and libexedir improvement</comment>

    <requestid>293476</requestid>

  </revision>

  <revision rev="3" vrev="1">

    <srcmd5>bbfe60a91b9383dd661e691b638da8ce</srcmd5>

    <version>1.60b</version>

    <time>1428652486</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>295181</requestid>

  </revision>

  <revision rev="4" vrev="1">

    <srcmd5>7d61228e9dff4dcf0eee4f320306618d</srcmd5>

    <version>1.62b</version>

    <time>1428790273</time>

    <user>dimstar_suse</user>

    <comment>afl 1.62b (forwarded request 295378 from AndreasStieger)</comment>

    <requestid>295379</requestid>

  </revision>

  <revision rev="5" vrev="1">

    <srcmd5>bbad7d1d768914bdc1c77abdcc26832d</srcmd5>

    <version>1.69b</version>

    <time>1429186454</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>297081</requestid>

  </revision>

  <revision rev="6" vrev="1">

    <srcmd5>f30177a8de7bfd170ad865b243940096</srcmd5>

    <version>1.71b</version>

    <time>1429658324</time>

    <user>dimstar_suse</user>

    <comment>afl 1.71b (forwarded request 298226 from AndreasStieger)</comment>

    <requestid>298227</requestid>

  </revision>

  <revision rev="7" vrev="1">

    <srcmd5>2e49df504cf7a56177611519f1baee18</srcmd5>

    <version>1.73b</version>

    <time>1430891339</time>

    <user>dimstar_suse</user>

    <comment>Automatic submission by obs-autosubmit</comment>

    <requestid>305275</requestid>

  </revision>

  <revision rev="8" vrev="1">

    <srcmd5>97c4bf2651a0bd0acefcebe8bbf5a8e8</srcmd5>

    <version>1.77b</version>

    <time>1431247640</time>

    <user>coolo</user>

    <comment>1</comment>

    <requestid>305943</requestid>

  </revision>

  <revision rev="9" vrev="1">

    <srcmd5>db4b525688240242ddc7674270a3a96b</srcmd5>

    <version>1.78b</version>

    <time>1431987680</time>

    <user>coolo</user>

    <comment>1</comment>

    <requestid>307842</requestid>

  </revision>

  <revision rev="10" vrev="2">

    <srcmd5>db4b525688240242ddc7674270a3a96b</srcmd5>

    <version>1.78b</version>

    <time>1431987681</time>

    <user>coolo</user>

    <comment>1</comment>

    <requestid>307842</requestid>

  </revision>

  <revision rev="11" vrev="1">

    <srcmd5>5e87531019b5c79509f8d1ba6a5f0cee</srcmd5>

    <version>1.80b</version>

    <time>1433232709</time>

    <user>dimstar_suse</user>

    <comment>afl 1.80b</comment>

    <requestid>309667</requestid>

  </revision>

  <revision rev="12" vrev="1">

    <srcmd5>4f6523b0efa0bd29c2c8d66aabac8ec1</srcmd5>

    <version>1.83b</version>

    <time>1434456316</time>

    <user>coolo</user>

    <comment>afl 1.83b</comment>

    <requestid>312108</requestid>

  </revision>

  <revision rev="13" vrev="1">

    <srcmd5>eaf83f5522eff95579d23c547a36a42a</srcmd5>

    <version>1.85b</version>

    <time>1438899844</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>320742</requestid>

  </revision>

  <revision rev="14" vrev="1">

    <srcmd5>5c6d482bd88021fd927cb140f3d78337</srcmd5>

    <version>1.86b</version>

    <time>1439385178</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>321770</requestid>

  </revision>

  <revision rev="15" vrev="1">

    <srcmd5>1628482f22422f979becc6274aa619ee</srcmd5>

    <version>1.92b</version>

    <time>1441727103</time>

    <user>dimstar_suse</user>

    <comment>afl 1.92b</comment>

    <requestid>329519</requestid>

  </revision>

  <revision rev="16" vrev="1">

    <srcmd5>6a4aa3a40023cd11a728f59a8aaafd86</srcmd5>

    <version>1.94b</version>

    <time>1444130757</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>335943</requestid>

  </revision>

  <revision rev="17" vrev="1">

    <srcmd5>007ecf44597a2d4da46d281a9fc4236a</srcmd5>

    <version>1.95b</version>

    <time>1447454174</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>344165</requestid>

  </revision>

  <revision rev="18" vrev="1">

    <srcmd5>c0f6c65ac1165980f113f74e02d4a930</srcmd5>

    <version>1.96b</version>

    <time>1450856989</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>349658</requestid>

  </revision>

  <revision rev="19" vrev="1">

    <srcmd5>e5e3e0df73b9ed0d4bd56fbdeedb7db6</srcmd5>

    <version>2.01b</version>

    <time>1455790027</time>

    <user>dimstar_suse</user>

    <comment>afl 2.01</comment>

    <requestid>359642</requestid>

  </revision>

  <revision rev="20" vrev="1">

    <srcmd5>767913d5ac695a2272b88d536cace58b</srcmd5>

    <version>2.04b</version>

    <time>1456434656</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>361310</requestid>

  </revision>

  <revision rev="21" vrev="1">

    <srcmd5>85572331ca9d924c6a5ae3b37d17f557</srcmd5>

    <version>2.05b</version>

    <time>1456821914</time>

    <user>dimstar_suse</user>

    <comment>afl 2.05b</comment>

    <requestid>362828</requestid>

  </revision>

  <revision rev="22" vrev="1">

    <srcmd5>e1c08ff2bd624521d36db15bdd5b3168</srcmd5>

    <version>2.09b</version>

    <time>1459422193</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>381246</requestid>

  </revision>

  <revision rev="23" vrev="1">

    <srcmd5>0fd16dce5ebed81c2047edbcc9ac0b0e</srcmd5>

    <version>2.10b</version>

    <time>1461855261</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>390313</requestid>

  </revision>

  <revision rev="24" vrev="1">

    <srcmd5>cead3c2a1dc5319382c0a683cfa462e9</srcmd5>

    <version>2.11b</version>

    <time>1462428765</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>393279</requestid>

  </revision>

  <revision rev="25" vrev="1">

    <srcmd5>cabb5e16f91716ecdf2060b80be7fc8c</srcmd5>

    <version>2.13b</version>

    <time>1464853130</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>399108</requestid>

  </revision>

  <revision rev="26" vrev="1">

    <srcmd5>49349cb50a98f813061dc619c6a698a0</srcmd5>

    <version>2.14b</version>

    <time>1466326173</time>

    <user>dimstar_suse</user>

    <comment>afl 2.14b (forwarded request 402522 from AndreasStieger)</comment>

    <requestid>402531</requestid>

  </revision>

  <revision rev="27" vrev="1">

    <srcmd5>aa85b19b1f41c48196100d8cf8abcde2</srcmd5>

    <version>2.17b</version>

    <time>1467359969</time>

    <user>dimstar_suse</user>

    <comment>afl 2.17b</comment>

    <requestid>405155</requestid>

  </revision>

  <revision rev="28" vrev="1">

    <srcmd5>9a4dbdaa762893c4c8fceb98c64e9d93</srcmd5>

    <version>2.21b</version>

    <time>1469742399</time>

    <user>dimstar_suse</user>

    <comment>afl 2.21b</comment>

    <requestid>414716</requestid>

  </revision>

  <revision rev="29" vrev="1">

    <srcmd5>8e48ec90552b9472e2317d6363b60382</srcmd5>

    <version>2.32b</version>

    <time>1472477748</time>

    <user>dimstar_suse</user>

    <comment>- Version 2.32b:

  - Added a check for AFL_HARDEN combined with AFL_USE_*SAN. Suggested by Hanno Boeck.

  - Made several other cosmetic adjustments to cycle timing in the wake of the big tweak made in 2.31b.

- Version 2.31b:

  - Changed havoc cycle counts for a marked performance boost, especially

    with -S / -d. See the discussion of FidgetyAFL in:

    https://groups.google.com/forum/#!topic/afl-users/fOPeb62FZUg

    While this does not implement the approach proposed by the authors of

    the CCS paper, the solution is a result of digging into that research;

    more improvements may follow as I do more experiments and get more

    definitive data.

- Version 2.30b:

  - Made minor improvements to persistent mode to avoid the remote

    possibility of "no instrumentation detected" issues with very low

    instrumentation densities.

  - Fixed a minor glitch with a leftover process in persistent mode.

    Reported by Jakub Wilk and Daniel Stender.

  - Made persistent mode bitmaps a bit more consistent and adjusted the way

    this is shown in the UI, especially in persistent mode.

- Version 2.29b:

  - Made a minor #include fix to llvm_mode. Suggested by Jonathan Metzman.

  - Made cosmetic updates to the docs.

- Version 2.28b:

  - Added "life pro tips" to docs/.

  - Moved testcases/_extras/ to dictionaries/ for visibility.

  - Made minor improvements to install scripts.

  - Added an important safety tip.

- Version 2.27b:

  - Added libtokencap, a simple feature to intercept strcmp / memcmp and

    generate dictionary entries that can help extend coverage. (forwarded request 422107 from msmeissn)</comment>

    <requestid>422108</requestid>

  </revision>

  <revision rev="30" vrev="1">

    <srcmd5>ca74e618a16398028a9ce8ecc6d24626</srcmd5>

    <version>2.35b</version>

    <time>1477219906</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>436567</requestid>

  </revision>

  <revision rev="31" vrev="1">

    <srcmd5>d545fbda19625ba14aa6969b2f2ea031</srcmd5>

    <version>2.39b</version>

    <time>1486968575</time>

    <user>dimstar_suse</user>

    <comment>- update to 2.39b:

  - Improved error reporting in afl-cmin. Suggested by floyd.

  - Made a minor tweak to trace-pc-guard support. Suggested by kcc.

  - Added a mention of afl-monitor.

- update to  2.38b:

  * Added -mllvm -sanitizer-coverage-block-threshold=0 to

    trace-pc-guard mode

  * Fixed a cosmetic bad free() bug when aborting -S sessions

  * Made a small change to afl-whatsup to sort fuzzers by name.

  * Fixed a minor issue with malloc(0) in libdislocator

  * Changed the clobber pattern in libdislocator to a slightly more

    reliable one

  * Added a note about THP performance

  * Added a somewhat unofficial support for running afl-tmin with a

    baseline "mask" that causes it to minimize only for edges that

    are unique to the input file, but not to the "boring" baseline.

  * "Fixed" a getPassName() problem with never versions of clang.</comment>

    <requestid>455996</requestid>

  </revision>

  <revision rev="32" vrev="2">

    <srcmd5>ec4b501d4c50da1313978bd08678ba18</srcmd5>

    <version>2.39b</version>

    <time>1489345471</time>

    <user>dimstar_suse</user>

    <comment>1</comment>

    <requestid>477897</requestid>

  </revision>

  <revision rev="33" vrev="1">

    <srcmd5>57752c02c42137ca7e6edf4480793ebc</srcmd5>

    <version>2.41b</version>

    <time>1492011470</time>

    <user>maxlin_factory</user>

    <comment>- update to 2.41b:

  - Addressed a major user complaint related to timeout detection. Timing out

    inputs are now binned as "hangs" only if they exceed a far more generous

    time limit than the one used to reject slow paths.

- update to 2.40b:

  - Fixed a minor oversight in the insertion strategy for dictionary words.

    Spotted by Andrzej Jackowski.

  - Made a small improvement to the havoc block insertion strategy.

  - Adjusted color rules for "is it done yet?" indicators.</comment>

    <requestid>487488</requestid>

  </revision>

  <revision rev="34" vrev="1">

    <srcmd5>7fbfd8fecf54971d0c2b26aea9ec8610</srcmd5>

    <version>2.44b</version>

    <time>1499152240</time>

    <user>dimstar_suse</user>

    <comment>afl 2.44b</comment>

    <requestid>507727</requestid>

  </revision>

  <revision rev="35" vrev="1">

    <srcmd5>f2cd2248f217c48d48674fa270aca0a4</srcmd5>

    <version>2.45b</version>

    <time>1499598256</time>

    <user>dimstar_suse</user>

    <comment>- update to 2.45b:

  - Added strstr, strcasestr support to libtokencap. Contributed by

    Daniel Hodson.

  - Fixed a resumption offset glitch spotted by Jakub Wilk.

  - There are definitely no bugs in afl-showmap -c now.</comment>

    <requestid>508930</requestid>

  </revision>

  <revision rev="36" vrev="1">

    <srcmd5>c8763e4829d04296667284a307c42eff</srcmd5>

    <version>2.49b</version>

    <time>1501067186</time>

    <user>dimstar_suse</user>

    <comment>- Version 2.49b

  - Added AFL_TMIN_EXACT to allow path constraint for crash minimization.

  - Added dates for releases (retroactively for all of 2017).

- Version 2.48b

  - Added AFL_ALLOW_TMP to permit some scripts to run in /tmp.

  - Fixed cwd handling in afl-analyze (similar to the quirk in afl-tmin).

  - Made it possible to point -o and -f to the same file in afl-tmin.

- Version 2.47b

  - Fixed cwd handling in afl-tmin. Spotted by Jakub Wilk.

- Version 2.46b

  - libdislocator now supports AFL_LD_NO_CALLOC_OVER for folks who do not

    want to abort on calloc() overflows.

  - Made a minor fix to libtokencap. Reported by Daniel Stender.

  - Added a small JSON dictionary, inspired on a dictionary done by Jakub Wilk. (forwarded request 512610 from msmeissn)</comment>

    <requestid>512611</requestid>

  </revision>

  <revision rev="37" vrev="2">

    <srcmd5>b30044222b6c770b2a993257c0652100</srcmd5>

    <version>2.49b</version>

    <time>1501572313</time>

    <user>maxlin_factory</user>

    <comment>- include docs/README</comment>

    <requestid>513056</requestid>

  </revision>

  <revision rev="38" vrev="1">

    <srcmd5>e81fb0fea818447a41a6c11bab29df50</srcmd5>

    <version>2.51b</version>

    <time>1504521546</time>

    <user>dimstar_suse</user>

    <comment>afl 2.51b</comment>

    <requestid>520490</requestid>

  </revision>

  <revision rev="39" vrev="1">

    <srcmd5>ffd3bd2daa7929b375a62c97d54be750</srcmd5>

    <version>2.52b</version>

    <time>1510045241</time>

    <user>dimstar_suse</user>

    <comment></comment>

    <requestid>539104</requestid>

  </revision>

  <revision rev="40" vrev="2">

    <srcmd5>1871a0125bbbbb6474e1a968f1c1b524</srcmd5>

    <version>2.52b</version>

    <time>1535705281</time>

    <user>dimstar_suse</user>

    <comment></comment>

    <requestid>632354</requestid>

  </revision>

  <revision rev="41" vrev="1">

    <srcmd5>0de895c49b90ed5dc6037cc2ea2af3a0</srcmd5>

    <version>2.52c</version>

    <time>1561405994</time>

    <user>dimstar_suse</user>

    <comment></comment>

    <requestid>711649</requestid>

  </revision>

  <revision rev="42" vrev="2">

    <srcmd5>d6be61645c82848a72b5aaee4f163610</srcmd5>

    <version>2.52c</version>

    <time>1573044698</time>

    <user>dimstar_suse</user>

    <comment></comment>

    <requestid>739467</requestid>

  </revision>

  <revision rev="43" vrev="1">

    <srcmd5>4bf57340ef562a229a5a1d27d3fe5723</srcmd5>

    <version>2.58c</version>

    <time>1574784126</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.58c

  - reverted patch to not unlink and recreate the input file, it resulted in performance loss of ~10%

  - added test/test-performance.sh script

  - (re)added gcc_plugin, fast inline instrumentation is not yet finished, however it includes the whitelisting and persistance feature! by hexcoder-

  - gcc_plugin tests added to testing framework

- jump to 2.57 instead of 2.55 to catch up with Google's versioning

  - persistent mode for QEMU (see qemu_mode/README.md)

  - custom mutator library is now an additional mutator, to exclusivly use it

  - add AFL_CUSTOM_MUTATOR_ONLY (that will trigger the previous behaviour)

  - new library qemu_mode/unsigaction which filters sigaction events

  - afl-fuzz: new command line option -I to execute a command on a new crash

  - no more unlinking the input file, this way the input file can also be a

  - FIFO or disk partition

  - setting LLVM_CONFIG for llvm_mode will now again switch to the selected

  - llvm version. If your setup is correct.

  - fuzzing strategy yields for custom mutator were missing from the UI, added them :)

  - added "make tests" which will perform checks to see that all functionality

  - is working as expected. this is currently the starting point, its not complete :)

  - added mutation documentation feature ("make document"), creates afl-fuzz-document

  - and saves all mutations of the first run on the first file into out/queue/mutations

  - libtokencap and libdislocator now compile to the afl_root directory and are

  - installed to the .../lib/afl directory when present during make install

  - more BSD support, e.g. free CPU binding code for FreeBSD (thanks to devnexen)

  - reducing duplicate code in afl-fuzz

  - added "make help"

  - removed compile warnings from python internal stuff

  - added man page for afl-clang-fast[++]

  - updated documentation

  - Wine mode to run Win32 binaries with the QEMU instrumentation (-W)

  - CompareCoverage for ARM target in QEMU/Unicorn</comment>

    <requestid>750847</requestid>

  </revision>

  <revision rev="44" vrev="1">

    <srcmd5>2ac8241680c609af39976da23e77e454</srcmd5>

    <version>2.59c</version>

    <time>1577536833</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.59c

  - qbdi_mode: fuzz android native libraries via QBDI framework

  - unicorn_mode: switched to the new unicornafl, thanks domenukk

                  (see https://github.com/vanhauser-thc/unicorn)

  - afl-fuzz:

     - added radamsa as (an optional) mutator stage (-R[R])

     - added -u command line option to not unlink the fuzz input file

     - Python3 support (autodetect)

     - AFL_DISABLE_TRIM env var to disable the trim stage

     - CPU affinity support for DragonFly

  - llvm_mode:

     - float splitting is now configured via AFL_LLVM_LAF_SPLIT_FLOATS

     - support for llvm 10 included now (thanks to devnexen)

  - libtokencap:

     - support for *BSD/OSX/Dragonfly added

     - hook common *cmp functions from widely used libraries

  - compcov:

     - hook common *cmp functions from widely used libraries

     - floating point splitting support for QEMU on x86 targets

  - qemu_mode: AFL_QEMU_DISABLE_CACHE env to disable QEMU TranslationBlocks caching

  - afl-analyze: added AFL_SKIP_BIN_CHECK support

  - better random numbers for gcc_plugin and llvm_mode (thanks to devnexen)

  - Dockerfile by courtesy of devnexen

  - added regex.dictionary

  - qemu and unicorn download scripts now try to download until the full

    download succeeded. f*ckin travis fails downloading 40% of the time!

  - more support for Android (please test!)

  - added the few Android stuff we didnt have already from Google afl repository

  - removed unnecessary warnings (forwarded request 759706 from msmeissn)</comment>

    <requestid>759716</requestid>

  </revision>

  <revision rev="45" vrev="1">

    <srcmd5>dc62c5d029166820085bdafeab147fef</srcmd5>

    <version>2.60c</version>

    <time>1578069437</time>

    <user>dimstar_suse</user>

    <comment></comment>

    <requestid>760476</requestid>

  </revision>

  <revision rev="46" vrev="2">

    <srcmd5>f655dde382beeff468c32a9960dd3af6</srcmd5>

    <version>2.60c</version>

    <time>1581368024</time>

    <user>dimstar_suse</user>

    <comment>- added radamsa mutator (forwarded request 772507 from msmeissn)</comment>

    <requestid>772508</requestid>

  </revision>

  <revision rev="47" vrev="1">

    <srcmd5>63e3900a53a741e64b0c699a730d5ac1</srcmd5>

    <version>2.61c</version>

    <time>1582725849</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.61c

  - use -march=native if available                                                                                                                                                           

  - most tools now check for mistyped environment variables                                                                                                                                  

  - gcc 10 is now supported                                                                                                                                                                  

  - the memory safety checks are now disabled for a little more speed during                                                                                                                 

    fuzzing (only affects creating queue entries), can be toggled in config.h                                                                                                                

  - afl-fuzz:                                                                                                                                                                                

     - MOpt out of bounds writing crash fixed                                                                                                                                                

     - now prints the real python version support compiled in                                                                                                                                

     - set stronger performance compile options and little tweaks                                                                                                                            

     - Android: prefer bigcores when selecting a CPU                                                                                                                                         

     - CmpLog forkserver                                                                                                                                                                     

     - Redqueen input-2-state mutator (cmp instructions only ATM)                                                                                                                            

     - all Python 2+3 versions supported now                                                                                                                                                 

     - changed execs_per_sec in fuzzer_stats from "current" execs per second                                                                                                                 

       (which is pointless) to total execs per second                                                                                                                                        

     - bugfix for dictionary insert stage count (fix via Google repo PR)                                                                                                                     

     - added warning if -M is used together with custom mutators with _ONLY option                                                                                                           

     - AFL_TMPDIR checks are now later and better explained if they fail                                                                                                                     

  - llvm_mode                                                                                                                                                                                

     - InsTrim: three bug fixes:                                                                                                                                                             

        1. (minor) no pointless instrumentation of 1 block functions                                                                                                                         

        2. (medium) path bug that leads a few blocks not instrumented that                                                                                                                   

           should be                                                                                                                                                                         

        3. (major) incorrect prev_loc was written, fixed!                                                                                                                                    

  - afl-clang-fast:                                                                                                                                                                          

     - show in the help output for which llvm version it was compiled for                                                                                                                    

     - now does not need to be recompiled between trace-pc and pass                                                                                                                          

       instrumentation. compile normally and set AFL_LLVM_USE_TRACE_PC :)                                                                                                                    

     - LLVM 11 is supported (forwarded request 779147 from msmeissn)</comment>

    <requestid>779153</requestid>

  </revision>

  <revision rev="48" vrev="1">

    <srcmd5>12174eb19eb75b29865e72462865b2e7</srcmd5>

    <version>2.62c</version>

    <time>1583007859</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.62c

  - Important fix for memory allocation functions that result in afl-fuzz not identifying crashes - UPDATE!

  - Small fix for -E/-V to release the CPU

  - CmpLog does not need sancov anymore (forwarded request 780290 from msmeissn)</comment>

    <requestid>780291</requestid>

  </revision>

  <revision rev="49" vrev="1">

    <srcmd5>c1e019cfa9df801847804e1ddb8d7f90</srcmd5>

    <version>2.63c</version>

    <time>1586775224</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.63c

  - all:

    - big code changes to make afl-fuzz thread-safe so afl-fuzz can spawn

      multiple fuzzing threads in the future or even become a library

    - afl basic tools now report on the environment variables picked up

    - more tools get environment variable usage info in the help output

    - force all output to stdout (some OK/SAY/WARN messages were sent to

      stdout, some to stderr)

    - uninstrumented mode uses an internal forkserver ("fauxserver")

    - now builds with `-D_FORTIFY_SOURCE=2`

    - drastically reduced number of (de)allocations during fuzzing

  - afl-fuzz:

    - python mutator modules and custom mutator modules now use the same

      interface and hence the API changed

    - AFL_AUTORESUME will resume execution without the need to specify `-i -`

    - added experimental power schedules (-p):

      - mmopt: ignores runtime of queue entries, gives higher weighting to

               the last 5 queue entries

      - rare: puts focus on queue entries that hits rare branches, also ignores

              runtime

  - llvm_mode: 

    - added SNAPSHOT feature (using https://github.com/AFLplusplus/AFL-Snapshot-LKM)

    - added Control Flow Integrity sanitizer (AFL_USE_CFISAN)

    - added AFL_LLVM_INSTRUMENT option to control the instrumentation type

      easier: DEFAULT, CFG (INSTRIM), LTO, CTX, NGRAM-x (x=2-16)

    - made USE_TRACE_PC compile obsolete

  - LTO collision free instrumented added in llvm_mode with afl-clang-lto -

    note that this mode is amazing, but quite some targets won't compile

  - Added llvm_mode NGRAM prev_loc coverage by Adrean Herrera

    (https://github.com/adrianherrera/afl-ngram-pass/), activate by setting (forwarded request 793419 from msmeissn)</comment>

    <requestid>793420</requestid>

  </revision>

  <revision rev="50" vrev="1">

    <srcmd5>7177d2669cf97ea3db88bea694772887</srcmd5>

    <version>2.64c</version>

    <time>1587467530</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.64c

  - llvm_mode LTO mode:

    - now requires llvm11 - but compiles all targets! :)

    - autodictionary feature added, enable with `AFL_LLVM_LTO_AUTODICTIONARY`

    - variable map size usage

  - afl-fuzz:

    - variable map size support added (only LTO mode can use this)

    - snapshot feature usage now visible in UI

    - Now setting `-L -1` will enable MOpt in parallel to normal mutation.

      Additionally, this allows to run dictionaries, radamsa and cmplog.

    - fix for cmplog/redqueen mode if stdin was used

    - fix for writing a better plot_data file

  - qemu_mode: fix for persistent mode (which would not terminate or get stuck)

  - compare-transform/AFL_LLVM_LAF_TRANSFORM_COMPARES now transforms also

    static global and local variable comparisons (cannot find all though)

  - extended forkserver: map_size and more information is communicated to

    afl-fuzz (and afl-fuzz acts accordingly)

  - new environment variable: AFL_MAP_SIZE to specify the size of the shared map

  - if AFL_CC/AFL_CXX is set but empty afl compilers did fail, fixed

    (this bug is in vanilla afl too)

  - added NO_PYTHON flag to disable python support when building afl-fuzz

  - more refactoring (forwarded request 795493 from msmeissn)</comment>

    <requestid>795494</requestid>

  </revision>

  <revision rev="51" vrev="1">

    <srcmd5>77fa9af715afae54a2165c47f7927dbb</srcmd5>

    <version>2.65c</version>

    <time>1589579541</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.65c

  - afl-fuzz:

     - AFL_MAP_SIZE was not working correctly

     - better python detection

     - an old, old bug in afl that would show negative stability in rare

       circumstances is now hopefully fixed

     - AFL_POST_LIBRARY was deprecated, use AFL_CUSTOM_MUTATOR_LIBRARY

       instead (see docs/custom_mutators.md)

  - llvm_mode:

     - afl-clang-fast/lto now do not skip single block functions. This

       behaviour can be reactivated with AFL_LLVM_SKIPSINGLEBLOCK

     - if LLVM 11 is installed the posix shm_open+mmap is used and a fixed

       address for the shared memory map is used as this increases the

       fuzzing speed

     - InsTrim now has an LTO version! :-) That is the best and fastest mode!

     - fixes to LTO mode if instrumented edges > MAP_SIZE

     - CTX and NGRAM can now be used together

     - CTX and NGRAM are now also supported in CFG/INSTRIM mode

     - AFL_LLVM_LAF_TRANSFORM_COMPARES could crash, fixed

     - added AFL_LLVM_SKIP_NEVERZERO to skip the never zero coverage counter

       implementation. For targets with few or no loops or heavily called

       functions. Gives a small performance boost.

  - qemu_mode:

    - add information on PIE/PIC load addresses for 32 bit

    - better dependency checks

  - gcc_plugin:

    - better dependency checks

  - unicorn_mode:

    - validate_crash_callback can now count non-crashing inputs as crash as well

    - better submodule handling (forwarded request 805785 from msmeissn)</comment>

    <requestid>805787</requestid>

  </revision>

  <revision rev="52" vrev="1">

    <srcmd5>6d99881c19893bc5910837898b7ee0b9</srcmd5>

    <version>2.66c</version>

    <time>1593728035</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.66c

  - renamed blacklist/whitelist to ignorelist/instrumentlist ->

    AFL_LLVM_INSTRUMENT_FILE and AFL_GCC_INSTRUMENT_FILE

  - warn on deprecated environment variables

  - afl-fuzz:

     - -S secondary nodes now only sync from the main node to increase

       performance, the -M main node still syncs from everyone. Added checks

       that ensure exactly one main node is present and warn otherwise

     - Add -D after -S to force a secondary to perform deterministic fuzzing

     - If no main node is present at a sync one secondary node automatically

       becomes a temporary main node until a real main nodes shows up

     - Fixed a mayor performance issue we inherited from AFLfast

     - switched murmur2 hashing and random() for xxh3 and xoshiro256**,

       resulting in an up to 5.5% speed increase

     - Resizing the window does not crash afl-fuzz anymore

     - Ensure that the targets are killed on exit

     - fix/update to MOpt (thanks to arnow117)

     - added MOpt dictionary support from repo

     - added experimental SEEK power schedule. It is EXPLORE with ignoring

       the runtime and less focus on the length of the test case

  - llvm_mode:

    - the default instrumentation is now PCGUARD if the llvm version is >= 7,

      as it is faster and provides better coverage. The original afl

      instrumentation can be set via AFL_LLVM_INSTRUMENT=AFL. This is

      automatically done when the instrument_file list feature is used. 

    - PCGUARD mode is now even better because we made it collision free - plus

      it has a fixed map size, so it is also faster! :)

    - some targets want a ld variant for LD that is not gcc/clang but ld,

      added afl-ld-lto to solve this

    - lowered minimum required llvm version to 3.4 (except LLVMInsTrim, which (forwarded request 818318 from msmeissn)</comment>

    <requestid>818325</requestid>

  </revision>

  <revision rev="53" vrev="1">

    <srcmd5>1cba31032ea50e49bea977cf0420b80b</srcmd5>

    <version>2.67c</version>

    <time>1597856472</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.67c

  - Support for improved afl++ snapshot module:                                                                                                                                              

    https://github.com/AFLplusplus/AFL-Snapshot-LKM                                                                                                                                          

  - Due to the instrumentation needing more memory, the initial memory sizes                                                                                                                 

    for -m have been increased                                                                                                                                                               

  - afl-fuzz:                                                                                                                                                                                

     - added -F option to allow -M main fuzzers to sync to foreign fuzzers,                                                                                                                  

       e.g. honggfuzz or libfuzzer                                                                                                                                                           

     - added -b option to bind to a specific CPU                                                                                                                                             

     - eliminated CPU affinity race condition for -S/-M runs                                                                                                                                 

     - expanded havoc mode added, on no cycle finds add extra splicing and                                                                                                                   

       MOpt into the mix                                                                                                                                                                     

     - fixed a bug in redqueen for strings and made deterministic with -s                                                                                                                    

  - llvm_mode:                                                                                                                                                                               

     - now supports llvm 12                                                                                                                                                                  

     - support for AFL_LLVM_ALLOWLIST/AFL_LLVM_DENYLIST (previous                                                                                                                            

       AFL_LLVM_WHITELIST and AFL_LLVM_INSTRUMENT_FILE are deprecated and                                                                                                                    

       are matched to AFL_LLVM_ALLOWLIST). The format is compatible to llvm                                                                                                                  

       sancov, and also supports function matching :)                                                                                                                                        

     - added neverzero counting to trace-pc/pcgard                                                                                                                                           

     - fixes for laf-intel float splitting (thanks to mark-griffin for                                                                                                                       

       reporting)                                                                                                                                                                            

     - fixes for llvm 4.0                                                                                                                                                                    

     - skipping ctors and ifuncs for instrumentation                                                                                                                                         

     - LTO: switch default to the dynamic memory map, set AFL_LLVM_MAP_ADDR                                                                                                                  

            for a fixed map address (eg. 0x10000)                                                                                                                                            

     - LTO: improved stability for persistent mode, no other instrumentation                                                                                                                 

            has that advantage                                                                                                                                                               

     - LTO: fixed autodict for long strings                                                                                                                                                  

     - LTO: laf-intel and redqueen/cmplog are now applied at link time (forwarded request 827912 from msmeissn)</comment>

    <requestid>827914</requestid>

  </revision>

  <revision rev="54" vrev="1">

    <srcmd5>0d026e50ed9e20f66a5e81c74c77b911</srcmd5>

    <version>2.68c</version>

    <time>1599421061</time>

    <user>dimstar_suse</user>

    <comment>- updated to 2.68c

  - added the GSoC excellent afl++ grammar mutator by Shengtuo to our                                                                                                                        

    custom_mutators/ (see custom_mutators/README.md) - or get it here:                                                                                                                       

    https://github.com/AFLplusplus/Grammar-Mutator                                                                                                                                           

  - a few QOL changes for Apple and its outdated gmake                                                                                                                                       

  - afl-fuzz:                                                                                                                                                                                

    - fix for auto dictionary entries found during fuzzing to not throw out                                                                                                                  

      a -x dictionary                                                                                                                                                                        

    - added total execs done to plot file                                                                                                                                                    

    - AFL_MAX_DET_EXTRAS env variable added to control the amount of                                                                                                                         

      deterministic dict entries without recompiling.                                                                                                                                        

    - AFL_FORKSRV_INIT_TMOUT env variable added to control the time to wait                                                                                                                  

      for the forkserver to come up without the need to increase the overall                                                                                                                 

      timeout.                                                                                                                                                                               

    - bugfix for cmplog that results in a heap overflow based on target data                                                                                                                 

      (thanks to the magma team for reporting!)                                                                                                                                              

    - write fuzzing setup into out/fuzzer_setup (environment variables and                                                                                                                   

      command line)                                                                                                                                                                          

  - custom mutators:                                                                                                                                                                         

    - added afl_custom_fuzz_count/fuzz_count function to allow specifying                                                                                                                    

      the number of fuzz attempts for custom_fuzz                                                                                                                                            

  - llvm_mode:                                                                                                                                                                               

    - ported SanCov to LTO, and made it the default for LTO. better                                                                                                                          

      instrumentation locations                                                                                                                                                              

    - Further llvm 12 support (fast moving target like afl++ :-) )                                                                                                                           

    - deprecated LLVM SKIPSINGLEBLOCK env environment (forwarded request 832521 from msmeissn)</comment>

    <requestid>832522</requestid>

  </revision>

  <revision rev="55" vrev="1">

    <srcmd5>7721aeac5ea266c415b704bdd11ad916</srcmd5>

    <version>3.0c</version>

    <time>1608112838</time>

    <user>dimstar_suse</user>

    <comment>- updated to 3.0c

  - llvm_mode/ and gcc_plugin/ moved to instrumentation/

  - examples/ renamed to utils/

  - moved libdislocator, libtokencap and qdbi_mode to utils/

  - all compilers combined to afl-cc which emulates the previous ones

  - afl-llvm/gcc-rt.o merged into afl-compiler-rt.o

  - afl-fuzz

    - not specifying -M or -S will now auto-set "-S default"

    - deterministic fuzzing is now disabled by default and can be enabled with

      -D. It is still enabled by default for -M.

    - a new seed selection was implemented that uses weighted randoms based on

      a schedule performance score, which is much better that the previous

      walk the whole queue approach. Select the old mode with -Z (auto enabled

      with -M)

    - Marcel Boehme submitted a patch that improves all AFFast schedules :)

    - the default schedule is now FAST

    - memory limits are now disabled by default, set them with -m if required

    - rpc.statsd support, for stats and charts, by Edznux, thanks a lot!

    - reading testcases from -i now descends into subdirectories

    - allow the -x command line option up to 4 times

    - loaded extras now have a duplication protection

    - If test cases are too large we do a partial read on the maximum

      supported size

    - longer seeds with the same trace information will now be ignored

      for fuzzing but still be used for splicing

    - crashing seeds are now not prohibiting a run anymore but are

      skipped - they are used for splicing, though

    - update MOpt for expanded havoc modes

    - setting the env var AFL_NO_AUTODICT will not load an LTO autodictionary

    - added NO_SPLICING compile option and makefile define (forwarded request 855999 from msmeissn)</comment>

    <requestid>856003</requestid>

  </revision>

  <revision rev="56" vrev="1">

    <srcmd5>3d07e873b06b3441070e7b6eb6bb5924</srcmd5>

    <version>3.10c</version>

    <time>1614684892</time>

    <user>RBrownSUSE</user>

    <comment>- update to 3.10c

  - Mac OS ARM64 support                                                                                                                                                                     

  - Android support fixed and updated by Joey Jiaojg - thanks!                                                                                                                               

  - New selective instrumentation option with __AFL_COVERAGE_* commands                                                                                                                      

    to be placed in the source code.                                                                                                                                                         

    Check out instrumentation/README.instrument_list.md                                                                                                                                      

  - afl-fuzz                                                                                                                                                                                 

    - Making AFL_MAP_SIZE (mostly) obsolete - afl-fuzz now learns on                                                                                                                         

      start the target map size                                                                                                                                                              

    - upgraded cmplog/redqueen: solving for floating point, solving                                                                                                                          

      transformations (e.g. toupper, tolower, to/from hex, xor,                                                                                                                              

      arithmetics, etc.). This is costly hence new command line option                                                                                                                       

      `-l` that sets the intensity (values 1 to 3). Recommended is 2.                                                                                                                        

    - added `AFL_CMPLOG_ONLY_NEW` to not use cmplog on initial seeds                                                                                                                         

      from `-i` or resumes (these have most likely already been done)                                                                                                                        

    - fix crash for very, very fast targets+systems (thanks to mhlakhani                                                                                                                     

      for reporting)                                                                                                                                                                         

    - on restarts (`-i`)/autoresume (AFL_AUTORESUME) the stats are now                                                                                                                       

      reloaded and used, thanks to Vimal Joseph for this patch!                                                                                                                              

    - changed the meaning of '+' of the '-t' option, it now means to                                                                                                                         

      auto-calculate the timeout with the value given being the max                                                                                                                          

      timeout. The original meaning of skipping timeouts instead of                                                                                                                          

      abort is now inherent to the -t option.                                                                                                                                                

    - if deterministic mode is active (`-D`, or `-M` without `-d`) then                                                                                                                      

      we sync after every queue entry as this can take very long time                                                                                                                        

      otherwise                                                                                                                                                                              

    - added minimum SYNC_TIME to include/config.h (30 minutes default)                                                                                                                       

    - better detection if a target needs a large shared map                                                                                                                                  

    - fix for `-Z`                                                                                                                                                                           

    - fixed a few crashes</comment>

    <requestid>875949</requestid>

  </revision>

  <revision rev="57" vrev="1">

    <srcmd5>7f5a05221f1576acc954841ca903a41a</srcmd5>

    <version>3.11c</version>

    <time>1615905996</time>

    <user>RBrownSUSE</user>

    <comment>- updated to 3.11c

  - afl-fuzz:

    - better auto detection of map size

    - fix sanitizer settings (bug since 3.10c)

    - fix an off-by-one overwrite in cmplog

    - add non-unicode variants from unicode-looking dictionary entries

    - Rust custom mutator API improvements

    - Imported crash stats painted yellow on resume (only new ones are red)

  - afl-cc:

    - added AFL_NOOPT that will just pass everything to the normal

      gcc/clang compiler without any changes - to pass weird configure

      scripts

    - fixed a crash that can occur with ASAN + CMPLOG together plus

      better support for unicode (thanks to @stbergmann for reporting!)

    - fixed a crash in LAF transform for empty strings

    - handle erroneous setups in which multiple afl-compiler-rt are

      compiled into the target. This now also supports dlopen()

      instrumented libs loaded before the forkserver and even after the

      forkserver is started (then with collisions though)

    - the compiler rt was added also in object building (-c) which

      should have been fixed years ago but somewhere got lost :(

    - Renamed CTX to CALLER, added correct/real CTX implementation to

      CLASSIC

  - qemu_mode:

    - added AFL_QEMU_EXCLUDE_RANGES env by @realmadsci, thanks!

    - if no new/updated checkout is wanted, build with:

      NO_CHECKOUT=1 ./build_qemu_support.sh

    - we no longer perform a "git drop"

  - afl-cmin: support filenames with spaces

- afl-3.0c-fix-paths.patch: refreshed (forwarded request 879398 from msmeissn)</comment>

    <requestid>879399</requestid>

  </revision>

  <revision rev="58" vrev="1">

    <srcmd5>47a25c4dc123fb7ba4ea3d9b657671a2</srcmd5>

    <version>3.12c</version>

    <time>1616680361</time>

    <user>RBrownSUSE</user>

    <comment>- updated to 3.12c

  - afl-fuzz:

    - added AFL_TARGET_ENV variable to pass extra env vars to the target

      (for things like LD_LIBRARY_PATH)

    - fix map detection, AFL_MAP_SIZE not needed anymore for most cases

    - fix counting favorites (just a display thing)

  - afl-cc:

    - fix cmplog rtn (rare crash and not being able to gather ptr data)

    - fix our own PCGUARD implementation to compile with llvm 10.0.1

    - link runtime not to shared libs