search

carolemieux / afl-rb

FairFuzz: AFL extension targeting rare branches
Other
240 stars 49 forks source link

confusing code #13

Open mineechor opened 1 year ago

mineechor commented 1 year ago

image Why did you delete these lines?

carolemieux commented 1 year ago

Great question. This was about five years ago so I don't exactly remember.

I believe the top_rated mechanism is used to determine "favored" inputs for each branch seen in the trace_map. This top_rated mechanism is not really used in FairFuzz, as FairFuzz favours inputs which hit rare branches. To determine this, it keeps around some tracking of which inputs hit which branches. I believe through the trace_mini field, so it doesn't want to get rid of the minimized trace even if the tc_ref goes to zero.

mineechor commented 1 year ago

thanks