search

google / honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
https://honggfuzz.dev
Apache License 2.0
3.04k stars 511 forks source link

pastis patch for honggfuzz #498

Closed vanhauser-thc closed 1 year ago

vanhauser-thc commented 1 year ago

This is not my patch, it is functionality added by Quarkslab for their fuzzer orchestration.

It adds two optional features:

  1. dynamic input directory (e.g. a libafl/AFL/libfuzzer corpus directory) from which periodically new inputs are read from
  2. a statistic file that prints some data that can be parsed by scripts

IMHO these are very useful features that would improve fuzzing with honggfuzz, so I would like to see them added.

The current method without such a patch is to stop honggfuzz, copy the honggfuzz corpus and the other fuzzer corpus directory together, minimize and restart with that as new inputs. which cost a lot of time and reduces effectiveness in a fuzzing campaign and hence why especially this feature is so useful.

If necessary I can add text to the README etc.

cnheitman commented 1 year ago

Hi! I implemented those features for PASTIS (dynamic-input and stats file). I did not made a PR because I was having compiling issues on Honggfuzz master (issue #497).

I could make the PR if these change are going to be merged.

robertswiecki commented 1 year ago

Nice!

robertswiecki commented 1 year ago

@cnheitman Would you like to submit something on top of this PR, or instead (or modifying) this PR?

cnheitman commented 1 year ago

@robertswiecki I would like to keep the authorship of the PR since I wrote those feature for Quarkslab.

Can we do something about it? Like revert an make the PR from my fork?

robertswiecki commented 1 year ago

@cnheitman - my mistake, reverted

cnheitman commented 1 year ago

Thanks! I'll make the PR now.

cnheitman commented 1 year ago

Done. Thanks @robertswiecki. And thanks @vanhauser-thc for bringing this patch up.

donpiekarz commented 10 months ago

@robertswiecki rewriting history is not nice to people :)

robertswiecki commented 10 months ago

@donpiekarz Correct, I'll do better in the future!