diff --git a/.files b/.files index 6354a68..b570d7e 100644 Binary files a/.files and b/.files differ diff --git a/.rev b/.rev index ea15a39..16964b6 100644 --- a/.rev +++ b/.rev @@ -543,4 +543,41 @@ - CmpLog does not need sancov anymore (forwarded request 780290 from msmeissn) 780291 + + c1e019cfa9df801847804e1ddb8d7f90 + 2.63c + + dimstar_suse + - updated to 2.63c + - all: + - big code changes to make afl-fuzz thread-safe so afl-fuzz can spawn + multiple fuzzing threads in the future or even become a library + - afl basic tools now report on the environment variables picked up + - more tools get environment variable usage info in the help output + - force all output to stdout (some OK/SAY/WARN messages were sent to + stdout, some to stderr) + - uninstrumented mode uses an internal forkserver ("fauxserver") + - now builds with `-D_FORTIFY_SOURCE=2` + - drastically reduced number of (de)allocations during fuzzing + - afl-fuzz: + - python mutator modules and custom mutator modules now use the same + interface and hence the API changed + - AFL_AUTORESUME will resume execution without the need to specify `-i -` + - added experimental power schedules (-p): + - mmopt: ignores runtime of queue entries, gives higher weighting to + the last 5 queue entries + - rare: puts focus on queue entries that hits rare branches, also ignores + runtime + - llvm_mode: + - added SNAPSHOT feature (using https://github.com/AFLplusplus/AFL-Snapshot-LKM) + - added Control Flow Integrity sanitizer (AFL_USE_CFISAN) + - added AFL_LLVM_INSTRUMENT option to control the instrumentation type + easier: DEFAULT, CFG (INSTRIM), LTO, CTX, NGRAM-x (x=2-16) + - made USE_TRACE_PC compile obsolete + - LTO collision free instrumented added in llvm_mode with afl-clang-lto - + note that this mode is amazing, but quite some targets won't compile + - Added llvm_mode NGRAM prev_loc coverage by Adrean Herrera + (https://github.com/adrianherrera/afl-ngram-pass/), activate by setting (forwarded request 793419 from msmeissn) + 793420 + diff --git a/2.62c.tar.gz b/2.62c.tar.gz deleted file mode 120000 index e917be1..0000000 --- a/2.62c.tar.gz +++ /dev/null @@ -1 +0,0 @@ -/ipfs/bafybeihqhei6zc46dwewxv5ouldsshfhdduovswwat7hxrlioxxp4aklu4 \ No newline at end of file diff --git a/2.63c.tar.gz b/2.63c.tar.gz new file mode 120000 index 0000000..dfdbc0c --- /dev/null +++ b/2.63c.tar.gz @@ -0,0 +1 @@ +/ipfs/bafybeieox5v6wi4ykflvhcbaiam2lqlhwjahuasxmram6refp5n6gm55ge \ No newline at end of file diff --git a/afl-1.58b-fix-paths.patch b/afl-1.58b-fix-paths.patch deleted file mode 100644 index 90106a4..0000000 --- a/afl-1.58b-fix-paths.patch +++ /dev/null @@ -1,19 +0,0 @@ ---- - Makefile | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -Index: AFLplusplus-2.58c/Makefile -=================================================================== ---- AFLplusplus-2.58c.orig/Makefile -+++ AFLplusplus-2.58c/Makefile -@@ -21,8 +21,8 @@ VERSION = $(shell grep '^\#define VE - - PREFIX ?= /usr/local - BIN_PATH = $(PREFIX)/bin --HELPER_PATH = $(PREFIX)/lib/afl --DOC_PATH = $(PREFIX)/share/doc/afl -+HELPER_PATH = $(LIBEXEC_DIR)/afl -+DOC_PATH = $(DOC_DIR)/afl - MISC_PATH = $(PREFIX)/share/afl - MAN_PATH = $(PREFIX)/man/man8 - diff --git a/afl-2.63c-fix-paths.patch b/afl-2.63c-fix-paths.patch new file mode 100644 index 0000000..230072c --- /dev/null +++ b/afl-2.63c-fix-paths.patch @@ -0,0 +1,15 @@ +Index: AFLplusplus-2.63c/GNUmakefile +=================================================================== +--- AFLplusplus-2.63c.orig/GNUmakefile ++++ AFLplusplus-2.63c/GNUmakefile +@@ -21,8 +21,8 @@ HASH=\# + + PREFIX ?= /usr/local + BIN_PATH = $(PREFIX)/bin +-HELPER_PATH = $(PREFIX)/lib/afl +-DOC_PATH = $(PREFIX)/share/doc/afl ++HELPER_PATH = $(LIBEXEC_DIR)/afl ++DOC_PATH = $(DOC_DIR)/afl + MISC_PATH = $(PREFIX)/share/afl + MAN_PATH = $(PREFIX)/man/man8 + diff --git a/afl.changes b/afl.changes index 159737e..69c73fc 100644 --- a/afl.changes +++ b/afl.changes @@ -1,4 +1,58 @@ ------------------------------------------------------------------- +Sun Apr 12 11:04:35 UTC 2020 - Marcus Meissner + +- updated to 2.63c + - all: + - big code changes to make afl-fuzz thread-safe so afl-fuzz can spawn + multiple fuzzing threads in the future or even become a library + - afl basic tools now report on the environment variables picked up + - more tools get environment variable usage info in the help output + - force all output to stdout (some OK/SAY/WARN messages were sent to + stdout, some to stderr) + - uninstrumented mode uses an internal forkserver ("fauxserver") + - now builds with `-D_FORTIFY_SOURCE=2` + - drastically reduced number of (de)allocations during fuzzing + - afl-fuzz: + - python mutator modules and custom mutator modules now use the same + interface and hence the API changed + - AFL_AUTORESUME will resume execution without the need to specify `-i -` + - added experimental power schedules (-p): + - mmopt: ignores runtime of queue entries, gives higher weighting to + the last 5 queue entries + - rare: puts focus on queue entries that hits rare branches, also ignores + runtime + - llvm_mode: + - added SNAPSHOT feature (using https://github.com/AFLplusplus/AFL-Snapshot-LKM) + - added Control Flow Integrity sanitizer (AFL_USE_CFISAN) + - added AFL_LLVM_INSTRUMENT option to control the instrumentation type + easier: DEFAULT, CFG (INSTRIM), LTO, CTX, NGRAM-x (x=2-16) + - made USE_TRACE_PC compile obsolete + - LTO collision free instrumented added in llvm_mode with afl-clang-lto - + note that this mode is amazing, but quite some targets won't compile + - Added llvm_mode NGRAM prev_loc coverage by Adrean Herrera + (https://github.com/adrianherrera/afl-ngram-pass/), activate by setting + AFL_LLVM_INSTRUMENT=NGRAM- or AFL_LLVM_NGRAM_SIZE= + - Added llvm_mode context sensitive branch coverage, activated by setting + AFL_LLVM_INSTRUMENT=CTX or AFL_LLVM_CTX=1 + - llvm_mode InsTrim mode: + - removed workaround for bug where paths were not instrumented and + imported fix by author + - made skipping 1 block functions an option and is disabled by default, + set AFL_LLVM_INSTRIM_SKIPSINGLEBLOCK=1 to re-enable this + - qemu_mode: + - qemu_mode now uses solely the internal capstone version to fix builds + on modern Linux distributions + - QEMU now logs routine arguments for CmpLog when the target is x86 + - afl-tmin: + - now supports hang mode `-H` to minimize hangs + - fixed potential afl-tmin missbehavior for targets with multiple hangs + - Pressing Control-c in afl-cmin did not terminate it for some OS + - the custom API was rewritten and is now the same for Python and shared + libraries. +- afl-1.58b-fix-paths.patch moved to +- afl-2.63c-fix-paths.patch: adjust Makefile -> GNUmakefile + +------------------------------------------------------------------- Fri Feb 28 14:09:26 UTC 2020 - Marcus Meissner - updated to 2.62c diff --git a/afl.spec b/afl.spec index 22a7e53..4042926 100644 --- a/afl.spec +++ b/afl.spec @@ -17,14 +17,14 @@ Name: afl -Version: 2.62c +Version: 2.63c Release: 0 Summary: American fuzzy lop is a security-oriented fuzzer License: Apache-2.0 URL: http://lcamtuf.coredump.cx/afl/ Source: https://github.com/vanhauser-thc/AFLplusplus/archive/%{version}.tar.gz Source1: afl-rpmlintrc -Patch1: afl-1.58b-fix-paths.patch +Patch1: afl-2.63c-fix-paths.patch BuildRequires: gcc-c++ %description @@ -68,8 +68,8 @@ make %{?_smp_mflags} PREFIX=%{_prefix} LIBEXEC_DIR=%{_libexecdir} DOC_DIR=%{_doc %dir %{_libexecdir}/%{name} %{_libexecdir}/%{name}/%{name}-as %{_libexecdir}/%{name}/as -%{_libexecdir}/%{name}/argvfuzz*.so -%{_libexecdir}/%{name}/socketfuzz*.so +#{_libexecdir}/%{name}/argvfuzz*.so +#{_libexecdir}/%{name}/socketfuzz*.so %{_libexecdir}/%{name}/libradamsa.so %dir %{_datadir}/%{name} %dir %{_datadir}/%{name}/testcases