HexHive / T-Fuzz

247 stars 39 forks source link

afl master only run first cycle? #13

Closed zjuchenyuan closed 5 years ago

zjuchenyuan commented 5 years ago

master.log shows:

    Test case count : 2 favored, 0 variable, 100 total
       Bitmap range : 1011 to 1013 bits (average: 1011.50 bits)
        Exec timing : 138k to 310k us (average: 237k us)

[*] No -t option specified, so I'll use exec timeout of 480 ms.
[+] All set and ready to roll!
[*] Entering queue cycle 1.
[*] Fuzzing test case #0 (100 total, 0 uniq crashes found)...

In normal afl runs, there should be more logs?

also, the runtime CPU is so low...

CONTAINER ID        NAME                CPU %               MEM USAGE / LIMIT   MEM %               NET I/O             BLOCK I/O           PIDS
2744d8ed2340        tfuzz3_30           3.25%               349.4MiB / 2GiB     17.06%              3.95kB / 0B         0B / 18.6MB         7

For running 24 hours, the crash folder in sync/fuzzer-master/crashes is also empty for mp3gain 1.5.2-r2. And there is only one output file in sync/fuzzer-master/crashes for tiffsplit (libtiff-3.9.7)

zjuchenyuan commented 5 years ago

my dockerfile:

FROM ubuntu:16.04
RUN sed -i 's/# deb-src/deb-src/g' /etc/apt/sources.list
RUN apt-get update && apt-get build-dep -y qemu-system && apt install -y build-essential gcc-multilib libtool automake autoconf bison debootstrap debian-archive-keyring libacl1-dev  python-pip python-virtualenv
RUN apt-get install -y git
RUN git clone https://github.com/HexHive/T-Fuzz && git clone https://github.com/radare/radare2.git && cd radare2 && ./sys/install.sh
RUN apt install -y libtool libtool-bin
RUN pip install git+https://github.com/shellphish/shellphish-afl.git
RUN cd T-Fuzz && sed -i 's/shellphish-afl==1.1//g' req.txt && pip install -r req.txt
ENV PYTHONWARNINGS ignore
RUN cp -R /usr/local/bin/afl-unix /usr/bin/
ADD utils.py /T-Fuzz/tfuzz

fix for utils.py are given in #12

zjuchenyuan commented 5 years ago

seems like my own problem, afl cpu binding under Docker environment

I change the afl code to skip the binding, then it seems ok now