better PS1 in dockerfile
MODIFY
Dockerfile
Dockerfile
@@ -50,13 +50,15 @@ ENV LLVM_CONFIG=llvm-config-11
ENV AFL_SKIP_CPUFREQ=1
RUN git clone https://github.com/vanhauser-thc/afl-cov /afl-cov
-RUN cd /afl-cov && make install
+RUN cd /afl-cov && make install && cd ..
COPY . /AFLplusplus
WORKDIR /AFLplusplus
RUN export REAL_CXX=g++-10 && export CC=gcc-10 && \
- export CXX=g++-10 && make clean && make distrib && make install && make clean
+ export CXX=g++-10 && make clean && \
+ make distrib && make install && make clean
RUN echo 'alias joe="jupp --wordwrap"' >> ~/.bashrc
-
+RUN echo 'export PS1="[afl++]$PS1"' >> ~/.bashrc
+ENV IS_DOCKER="1"

MODIFY
TODO.md
TODO.md
@@ -30,3 +30,15 @@ qemu_mode:
persistent mode
- add/implement AFL_QEMU_INST_LIBLIST and AFL_QEMU_NOINST_PROGRAM
- add/implement AFL_QEMU_INST_REGIONS as a list of _START/_END addresses
+
+## Ideas
+
+ - LTO/sancov: write current edge to prev_loc and use that information when
+ using cmplog or __sanitizer_cov_trace_cmp*. maybe we can deduct by follow
+ up edge numbers that both following cmp paths have been found and then
+ disable working on this edge id
+
+ - new tancov: use some lightweight taint analysis to see which parts of a
+ new queue entry is accessed and only fuzz these bytes - or better, only
+ fuzz those bytes that are newly in coverage compared to the queue entry
+ the new one is based on

better PS1 in dockerfile