Termination condition(s) of function select_tree_node?

DonggeLiu / AFLNet_Legion

AFLNet with MCTS

Apache License 2.0

6 stars 3 forks source link

Termination condition(s) of function select_tree_node? #4

Open thuanpv opened 4 years ago

thuanpv commented 4 years ago

Can you please elaborate on the termination condition(s) of function select_tree_node? I refer to this implemetation https://github.com/Alan32Liu/AFLNet_MCTS/blob/2945f1097223fab28ff81404f55121ba9d4d89be/MCTS/TreeNode.c#L399

DonggeLiu commented 4 years ago

It terminates when a golden node is selected. There are two kinds of nodes in the tree: White nodes correspond to states (with a response code, inputs, etc.); Golden nodes represent the option of running fuzzing from its parent state. This function selects a golden node, then select_seed selects an input prefix that reaches the parent of the golden node.