Skip to content
This repository has been archived by the owner on Aug 23, 2024. It is now read-only.

Can you explain the fuzzer_stats and the command_line used? #26

Open
Picasso-r opened this issue Jun 27, 2024 · 0 comments
Open

Can you explain the fuzzer_stats and the command_line used? #26

Picasso-r opened this issue Jun 27, 2024 · 0 comments

Comments

@Picasso-r
Copy link

Hello @thdusdl1219 @tarafans .I actually get everything working. But I have some questions to help me understand more about DIE.

Here is my fuzzer_stats file:

cat fuzzer_stats
start_time        : 1719463042
last_update       : 1719470780
fuzzer_pid        : 755288
cycles_done       : 0
execs_done        : 95763
execs_per_sec     : 2.03
paths_total       : 0
paths_favored     : 0
paths_found       : 0
paths_imported    : 0
max_depth         : 0
cur_path          : 957
pending_favs      : 0
pending_total     : 0
variable_paths    : 0
stability         : 100.00%
bitmap_cvg        : 0.00%
unique_crashes    : 0
unique_hangs      : 0
last_path         : 0
last_crash        : 0
last_hang         : 0
execs_since_crash : 95763
exec_timeout      : 1000
afl_banner        : d8
afl_version       : 2.52b
target_mode       : crash 
command_line      : ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/lib.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/jsc.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/v8.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/ffx.js /home/fuzz/v8fuzz/DIE0626/DIE/DIE-corpus/chakra.js @@

I have two questions.

  1. I find that most numbers are 0, I think this is wired. Is this correct? Or is there anything wrong with instrument or coverage collection?

  2. The command line is so long and I can't figure out the function of lib.js, v8.js ... Can I just remove them like:
    ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 @@
    And I can't figure out where to set the flags of v8 such as --allow-natives-syntax, --expose-gc ... Should I add them manually like:
    ./fuzz/afl/afl-fuzz -C -m none -o output-17 /home/fuzz/v8fuzz/v8/out/fuzzbuild_DIE_2/d8 --allow-natives-syntax --expose-gc @@

Thanks veryyy much.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant