search

shellphish / driller

Driller: augmenting AFL with symbolic execution!
BSD 2-Clause "Simplified" License
889 stars 162 forks source link

How does afl-cgc deliver the input to the target program #29

Closed Mambaboy closed 6 years ago

Mambaboy commented 7 years ago

I find that the afl-cgc start the target-program in qemu mode using parameters such as "/shellphish-afl/bin/afl-cgc/tracers/i386/afl-qemu-trace -- /binaries/tests/cgc/251abc02_01". But how does the afl-cgc give the input to the program? It does not add the location of the input file. Thank you very much

zardus commented 7 years ago

Input is transmitted over stdin.

On Mar 26, 2017 6:31 AM, "xiaosatianyu" notifications@github.com wrote:

I find that the afl-cgc start the target-program in qemu mode using parameters such as "/shellphish-afl/bin/afl-cgc/tracers/i386/afl-qemu-trace -- /binaries/tests/cgc/251abc02_01". But how does the afl-cgc give the input to the program? It does not add the location of the input file. Thank you very much

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/shellphish/driller/issues/29, or mute the thread https://github.com/notifications/unsubscribe-auth/ADSzl04CJmXh8noad9XUKqbBLfsSRTZbks5rpmjDgaJpZM4MpbaL .