googleprojectzero / winafl

A fork of AFL for fuzzing Windows binaries
Apache License 2.0
2.36k stars 533 forks source link

drrun.exe and afl-fuzz.exe giving error when -fsanitize=address flag given to compile target #423

Open faran1512 opened 1 year ago

faran1512 commented 1 year ago

Hi, I am trying to run drrun on my harness compiled with the following command: clang VLC_Harness.c -o VLC_Harness.exe -fsanitize=address -I C:\Users\user\Desktop\Fuzzing\vlc-3.0.7.1\sdk\include -L C:\Users\user\Desktop\Fuzzing\vlc-3.0.7.1\sdk\lib -l libvlc -l libvlccore

I used the following command to for drrun: C:\Users\user\Desktop\winafl\DynamoRIO-Windows-10.0.19678\bin64\drrun.exe -c winafl.dll -debug -fuzz_iterations 10 -coverage_module libvlc.dll -target_module VLC_Harness.exe -target_method fuzz -nargs 2 -- VLC_Harness.exe in\a.mp4

Now, Without ASAN the drrun.exe and afl-fuzz.exe work fine. But with ASAN on, drrun gives following output: Module loaded, dynamorio.dll Module loaded, winafl.dll Module loaded, drx.dll Module loaded, drreg.dll Module loaded, drmgr.dll Module loaded, drwrap.dll Module loaded, drsyms.dll Module loaded, VLC_Harness.exe Module loaded, libvlccore.dll Module loaded, libvlc.dll Module loaded, RSAENH.dll Module loaded, CRYPTSP.dll Module loaded, CRYPTBASE.dll Module loaded, gdi32full.dll Module loaded, bcryptPrimitives.dll Module loaded, msvcp_win.dll Module loaded, KERNELBASE.dll Module loaded, win32u.dll Module loaded, bcrypt.dll Module loaded, ucrtbase.dll Module loaded, msvcrt.dll Module loaded, IMM32.dll Module loaded, SHELL32.dll Module loaded, SECHOST.dll Module loaded, ADVAPI32.dll Module loaded, GDI32.dll Module loaded, WS2_32.dll Module loaded, USER32.dll Module loaded, KERNEL32.dll Module loaded, RPCRT4.dll Module loaded, ntdll.dll Exception caught: c0000005 crashed WARNING: Target function was never called. Incorrect target_offset? Coverage map follows:

any solution will be appreciated