AngoraFuzzer / Angora

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Apache License 2.0
927 stars 168 forks source link

some issues about the context in the source code #104

Open JialeDeng opened 4 years ago

JialeDeng commented 4 years ago

Hi, I am reading your paper rencently. It is well written. I am confused about how you implement the branch with context in the source code. More specifically, where can I find the defination of branch mentioned in the paper (l_prev; l_cur; context) in the source code? Thanks a lot.

spinpx commented 4 years ago

see https://github.com/AngoraFuzzer/Angora/blob/master/llvm_mode/pass/AngoraPass.cc#L469

JialeDeng commented 4 years ago

thanks!

JialeDeng commented 4 years ago

by the way, where can I find the implemention of "taint labels" and the data structure in the source code? thkans!(。^▽^)

spinpx commented 4 years ago

@J-Daniel The structure is in https://github.com/AngoraFuzzer/Angora/blob/master/runtime/src/tag_set.rs