I want to use honggfuzz-rs to fuzz some unsafe code, however, the ASAN doesn't seem to work. For example, I use the code just from the example directory, and replace the code in main.rs with
#[macro_use] extern crate honggfuzz;
fn main() {
loop {
fuzz!(|data: &[u8]| {
// use after free bug
let xs = vec![0, 1, 2, 3];
let y = xs.as_ptr();
drop(xs);
let z = unsafe { *y };
});
}
}
I fuzz the project with
RUSTFLAGS="-Z sanitizer=address" cargo hfuzz run example
However, the fuzzer can not detect the bug(Theres should be only one path).
There's one warning message from honggfuzz.
I hope you can check if this can work properly. Thanks a lot.
I want to use honggfuzz-rs to fuzz some unsafe code, however, the ASAN doesn't seem to work. For example, I use the code just from the example directory, and replace the code in main.rs with
I fuzz the project with
However, the fuzzer can not detect the bug(Theres should be only one path). There's one warning message from honggfuzz.
I hope you can check if this can work properly. Thanks a lot.