src/libzafl.c

@@ -288,9 +288,17 @@ static void zafl_setupAflTracemapSharedMemory()
 	zafl_trace_map = NULL;
 
 	void* trace_map_fixed_addr = (void*) NULL;
+
+	// try to find a fixed map address from any loaded object file.
 	dl_iterate_phdr(find_map_addr, (void*)&trace_map_fixed_addr);
-	const int do_fixed_addr_optimization = (trace_map_fixed_addr != NULL);
 
+	// try to find a fixed map address from the environment
+	if (trace_map_fixed_addr == NULL && getenv("ZAFL_FIXED_MAP_ADDR")) 
+	{
+		trace_map_fixed_addr=(void*)(strtoul(getenv("ZAFL_FIXED_MAP_ADDR"), NULL, 0));
+	}
+
+	const int do_fixed_addr_optimization = (trace_map_fixed_addr != NULL);
 	void* shmat_addr = trace_map_fixed_addr;
 
 	if (do_fixed_addr_optimization)