You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the qemu_linux_process example, I try to test the segfault, however the fuzzer fails to observe the crash, the qemu instance continues to process.
So how to detect the segfault or timeout of QEMU linux process?
bool FuzzMe(const uint8_t *Data, size_t DataSize) {
if (DataSize > 3) {
if (Data[0] == 'F') {
if (Data[1] == 'U') {
if (Data[2] == 'Z') {
if (Data[3] == 'Z') { *(char *)1 = 2; }
}
}
}
}
return false;
}
int main() {
// Prepare some space for the input
uint8_t Data[10] = {0};
lqprintf("Fuzzing starts\n");
// Start fuzzer here
size_t len = libafl_qemu_start_virt(Data, 10);
// Call the target
bool ret = FuzzMe(Data, len);
libafl_qemu_end(LIBAFL_QEMU_END_OK);
}
The text was updated successfully, but these errors were encountered:
tokatoka
changed the title
how to detect segfault of QEMU linux process
how to detect segfault of qemu_linux_process
Nov 12, 2024
In the qemu_linux_process example, I try to test the segfault, however the fuzzer fails to observe the crash, the qemu instance continues to process.
So how to detect the segfault or timeout of QEMU linux process?
The text was updated successfully, but these errors were encountered: