fdu-sec / NestFuzz

A structure-aware grey box fuzzer based on modeling the input processing logic.
Apache License 2.0
156 stars 12 forks source link

unexpected results from ipl-modeling tests #6

Closed juniorprincewang closed 3 months ago

juniorprincewang commented 3 months ago

I compiled ipl-modeling/test/loopTest.c with test-clang loopTest.c -o loopTestNew. However the executing result of loopTestNew is not the same as loopTest. Can someone help to explain it?

  0123456789
  fp_label: 0
  []
  buffer_label: 0
  []
  dst_label: 0
  []
  34 
  buffer_label: 0
  []
  dst_label: 0
  []
  buffer_label: 0
  []
  dst_label: 0
  []
  buffer_label: 0
  []
  dst_label: 0
  []
fdu-sec commented 3 months ago

The following steps may address this issue:

  1. Modify Line 48 in loopTest.c:
    -       fp = fopen("file", "rb");
    +       fp = fopen("file.isi", "rb");
  2. Create a new file with .isiextension:
    cp file file.isi
  3. Recompile loopTest.c:
    test-clang loopTest.c -o loopTestNew

The issue arises because NestFuzz only performs taint analysis for inputs with the .isi extension in their filenames.