search

googleprojectzero / winafl

A fork of AFL for fuzzing Windows binaries
Apache License 2.0
2.36k stars 533 forks source link

Problem. Test case 'id_000000' results in a timeout #368

Open mehdighninoudev opened 2 years ago

mehdighninoudev commented 2 years ago

Hi I have launched the command afl-fuzz.exe -i in -o out -D "C:\Users\User\Desktop\Tools\Fuzzing\DRRUN\DynamoRIO-Windows-8.0.18929\bin64" -t 20000 -- -coverage_module dllmain.dll -coverage_module dllmain2.dll -coverage_module dllmain3.dll -fuzz_iterations 5000 -target_module program.exe -target_method WinMain -nargs 2 -- "program.exe" @@

but it gives me a timeout testcase error: `[-] The program took more than 20000 ms to process one of the initial test cases. In WinAFL, this error could also mean incorrect instrumentation params. Please make sure instrumentation runs correctly using the debug mode (see the README) before attempting to run afl-fuzz.

[-] PROGRAM ABORT : Test case 'id_000000' results in a timeout Location : perform_dry_run(), C:\Users\User\Desktop\Tools\Fuzzing\DRRUN\winafl\afl-fuzz.c:3233`

Test case is less than 1mb.

ifratric commented 2 years ago

Please run the debug mode first as explained in https://github.com/googleprojectzero/winafl/blob/master/readme_dr.md and check the log. It can help you debug issues such as this.

mehdighninoudev commented 2 years ago

I have launched the debug mode and opened the .proc.log file but it gives me only a list of loaded modules and I have this error [-] PROGRAM ABORT : Cannot kill child process

     Location : destroy_target_process(), C:\Users\User\Desktop\Tools\Fuzzing\DRRUN\winafl\afl-fuzz.c:2648

but when I am quitting the fuzzed application it gives me this error crashwinafl

mehdighninoudev commented 2 years ago

I have launched winafl with administrator privileges but nothing (same crash)