Skip to content

winafl_cmin.py stuck at [*] Testing the target binary #473

@SebastianVoigt

Description

@SebastianVoigt

I compiled WinAfl (1.17) with TinyInst on same machine, where fuzzing is executed. Fuzzing itself works well.

For corpus minimization I called:
python winafl-cmin.py -Y -t 1000 -i origin_test_data -o minimized -covtype edge -coverage_module mymod.dll -target_module myharness.exe -target_method main -nargs 2 -- myharness.exe "@@"

Even after one day it still shows:

corpus minimization tool for WinAFL by <[email protected]>
Based on WinAFL by <[email protected]>
Based on AFL by <[email protected]>
[+] CWD changed to C:\fuzzing\***\bin.
[+] Dynamorio-less mode is enabled.
[*] Testing the target binary...

Should the minimization work when TinyInst is used?

Beside that I also considered to implement my own minimization using afl-showmap:

.\afl-showmap.exe -Y -o ..\map.txt -t 5000 -e -- .\harness.exe ..\testdata\testfile.txt

The used file is very small. Here it hangs on Processing file.

Any ideas?
DynamoRio instrumentation isn't working at all for me.

Update:
Did some more investigations with afl-showmap:

It could be a deadlock. There are two threads. One is not returning from afl_showmap!create_target_process, when calling ConnectNamedPipe. The second is not returning from afl_showmap!ILT+275(watchdog_timer) on CloseHandle

Thanks,
Sebastian

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions