insecure-fuzz

• GhostScript: Works?
• ImageMagick: Works?
• MediaServer: Needs work
• OpenSSL HeartBleed: Works?
• PulseAudio: Needs work

Things to try:

Set AFL_INST_RATIO to 100%

AFL_INST_RATIO=100

This currently includes -D_FORTIFY_SOURCE=2 and -fstack-protector-all.

AFL_HARDEN=1

Use clang fast

CC=/usr/bin/afl-clang-fast ./configure
CXX=/usr/bin/afl-clang-fast++ ./configure

Minimize the corpus

afl-cmin -i <input_folder> -o <output_folder> -- <binary> <options> @@

Minimize the test

afl-tmin -i <test_case> -o <output> -- <binary> <options> @@

Notes

Might need: root changes for AFL (cat /usr/share/doc/afl-doc/docs/notes_for_asan.txt)

sudo su -
echo core >/proc/sys/kernel/core_pattern
cd /sys/devices/system/cpu
echo performance | tee cpu*/cpufreq/scaling_governor