trailofbits / sienna-locomotive

A user-friendly fuzzing and crash triage tool for Windows
https://blog.trailofbits.com/user-friendly-fuzzing-with-sienna-locomotive
GNU Affero General Public License v3.0
133 stars 24 forks source link

Issue getting fuzzgoat (and other apps) demo working in sl-deploy #393

Open jeybb opened 5 years ago

jeybb commented 5 years ago

Tested: Win10 1709 (x64) with sl-deploy.zip

After trying several apps and finally going back to fuzzgoat to make sure one can at least make it through the wizard with it and pick fuzzing target functions, this error is common across all targets tested upon "Run Wizard":

"DynamoRIO notice: Client library targets an incompatible API version and should be re-compiled."

Which means there's a mismatch somewhere, maybe between fuzzgoat and the included dynamorio package (?) and of course results in a Wizard failure.

Also tried switching out DynamoRIO for the latest release there, but made no difference. Besides this particular app, which should be fine for the demo, as I assume it was tested to work fine prior to release of the deploy package, are there particular build instructions for any other target apps as well? Do they need debug options enabled and always linked with DynamoRIO? Is it possible for SL to handle non-instrumented binaries? Also curious why 32-bit isn't supported (?). I've seen folks asking about this and similar things on the blog post comments as well. Perhaps some more testing/examples would be useful for those looking to get SL running stable in a pipeline.

Thanks for your time!

Pl0414141 commented 5 years ago

Hi,

you can use the latest version of DynamoRIO (https://github.com/DynamoRIO/dynamorio/releases) and modify SL to avoid the message error ""DynamoRIO notice: Client library targets an incompatible API version and should be re-compiled.", however, I have done it and I find the following problems:

  1. Large size programs as Microsoft Office does not work well
  2. Occasionally, the supported functions for data entry (fread) are not displayed
  3. The wizard freezes and the process must be restarted

On the other hand, 32-bit applications are not supported, it is one of the things that would be very interesting for future versions of SL.