Skip to content
Snippets Groups Projects
Commit a8bcce68 authored by Anh Nguyen-Tuong's avatar Anh Nguyen-Tuong
Browse files

Revamp laf transformation

Instead of the original laf-intel style instrumentation with nested 1
byte compare, we instead instrument each byte separately to provide afl
with hints. We then execute the original cmp/jcc sequence.

Advantages of this method are that we do not have to handle
signed/unsigned comparisons of bytes, nor do we have to deal with having
separate code to handle >=, <=.

Furthermore, we can easily guide AFL towards inducing division by zero,
by doing a compare against 0, i.e., logically add "cmp X, 0" before a "div X" instruction.
parent 6af05b56
No related branches found
No related tags found
No related merge requests found
Checking pipeline status
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment