Open vanhauser-thc opened 5 years ago
Hi @vanhauser-thc.
There are two reasons that may cause this issue.
the seed is more than 15k, we limited the seeds to 15k since we use byte level taint tracking. If the seed is too huge, it will bring much overhead.
It did not mark the source for taint analysis. Angora adds taint for some read functions, but I can't ensure it will add taints for all read functions.
The taint is lost while taint propagation.
I will dubug it if I have time, but sorry I am busy in some works these days.
the in/ directory contains one test.rar file that works fine, also when used with unrar.taint (with lots of ASAN output) and unrar.fast
the command line works fine with afl-fuzz too (afl-fuzz -i in -o out -- ./unrar.afl -inul p @@)
what could be the issue here?