diff options
author | Robert Swiecki <robert@swiecki.net> | 2017-12-13 13:02:52 +0100 |
---|---|---|
committer | Robert Swiecki <robert@swiecki.net> | 2017-12-13 13:02:52 +0100 |
commit | 216a4363eca17e2bfb56b5af3cd166dd9c0b47a1 (patch) | |
tree | 70e6f0822dd8f6a8326b47548e8ea03bb342b74a | |
parent | 0f68ccab7b559161576fb757bdf4d022996ee13a (diff) | |
download | honggfuzz-216a4363eca17e2bfb56b5af3cd166dd9c0b47a1.tar.gz |
usage: Use djpeg instead of tiffinfo in usage, to avoid using -D flag
-rw-r--r-- | cmdline.c | 22 | ||||
-rw-r--r-- | docs/USAGE.md | 49 |
2 files changed, 35 insertions, 36 deletions
@@ -73,32 +73,28 @@ static void cmdlineHelp(const char* pname, struct custom_option* opts) { LOG_HELP( " Run the binary over a mutated file chosen from the directory. Disable fuzzing " "feedback (dry/static mode)"); - LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -x -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -x -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP(" As above, provide input over STDIN:"); LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -x -s -- /usr/bin/djpeg"); LOG_HELP(" Use compile-time instrumentation (libhfuzz/instrument.c):"); - LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP(" Use SANCOV instrumentation:"); - LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -C -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -C -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP(" Use persistent mode (libhfuzz/persistent.c) w/o instrumentation:"); - LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -P -x -- /usr/bin/tiffinfo_persistent"); + LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -P -x -- /usr/bin/djpeg_persistent_mode"); LOG_HELP(" Use persistent mode (libhfuzz/persistent.c) and compile-time instrumentation:"); - LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -P -- /usr/bin/tiffinfo_persistent"); + LOG_HELP_BOLD(" " PROG_NAME " -f input_dir -P -- /usr/bin/djpeg_persistent_mode"); #if defined(_HF_ARCH_LINUX) LOG_HELP( " Run the binary with dynamically generate inputs, maximize total no. of instructions:"); - LOG_HELP_BOLD( - " " PROG_NAME " --linux_perf_instr -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " --linux_perf_instr -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP(" As above, maximize total no. of branches:"); - LOG_HELP_BOLD( - " " PROG_NAME " --linux_perf_branch -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " --linux_perf_branch -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP(" As above, maximize unique branches (edges) via Intel BTS:"); - LOG_HELP_BOLD( - " " PROG_NAME " --linux_perf_bts_edge -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " --linux_perf_bts_edge -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); LOG_HELP( " As above, maximize unique code blocks via Intel Processor Trace (requires libipt.so):"); - LOG_HELP_BOLD( - " " PROG_NAME " --linux_perf_ipt_block -- /usr/bin/tiffinfo -D " _HF_FILE_PLACEHOLDER); + LOG_HELP_BOLD(" " PROG_NAME " --linux_perf_ipt_block -- /usr/bin/djpeg " _HF_FILE_PLACEHOLDER); #endif /* defined(_HF_ARCH_LINUX) */ } diff --git a/docs/USAGE.md b/docs/USAGE.md index 9671e9d8..3c6d354a 100644 --- a/docs/USAGE.md +++ b/docs/USAGE.md @@ -48,8 +48,7 @@ It should work under the following operating systems: # USAGE # -``` -Usage: ./honggfuzz [options] -- path_to_command [args] +```shell Usage: ./honggfuzz [options] -- path_to_command [args] Options: --help|-h @@ -72,8 +71,8 @@ Options: Number of concurrent fuzzing threads (default: number of CPUs / 2) --stdin_input|-s Provide fuzzing input on STDIN, instead of ___FILE___ - --mutation_rate|-r VALUE - Maximal mutation rate in relation to the file size, (default: '0.001') + --mutations_per_run|-r VALUE + Maximal number of mutations per one run (default: '6') --logfile|-l VALUE Log file --verbose|-v @@ -101,7 +100,11 @@ Options: --iterations|-N VALUE Number of fuzzing iterations (default: '0' [no limit]) --rlimit_as VALUE - Per process memory limit in MiB (default: '0' [no limit]) + Per process RLIMIT_AS in MiB (default: '0' [no limit]) + --rlimit_rss VALUE + Per process RLIMIT_RSS in MiB (default: '0' [no limit]) + --rlimit_data VALUE + Per process RLIMIT_DATA in MiB (default: '0' [no limit]) --report|-R VALUE Write report to this file (default: 'HONGGFUZZ.REPORT.TXT') --max_file_size|-F VALUE @@ -154,26 +157,26 @@ Options: Use Linux IPC namespace isolation Examples: - Run the binary over a mutated file chosen from the directory - honggfuzz -f input_dir -- /usr/bin/tiffinfo -D ___FILE___ + Run the binary over a mutated file chosen from the directory. Disable fuzzing feedback (dry/static mode) + honggfuzz -f input_dir -x -- /usr/bin/djpeg ___FILE___ As above, provide input over STDIN: - honggfuzz -f input_dir -s -- /usr/bin/djpeg - Use SANCOV to maximize code coverage: - honggfuzz -f input_dir -C -- /usr/bin/tiffinfo -D ___FILE___ + honggfuzz -f input_dir -x -s -- /usr/bin/djpeg Use compile-time instrumentation (libhfuzz/instrument.c): - honggfuzz -f input_dir -- /usr/bin/tiffinfo -D ___FILE___ - Use persistent mode (libhfuzz/persistent.c): - honggfuzz -f input_dir -P -- /usr/bin/tiffinfo_persistent - Use persistent mode (libhfuzz/persistent.c) and compile-time instrumentation (libhfuzz/instrument.c): - honggfuzz -f input_dir -P -- /usr/bin/tiffinfo_persistent - Run the binary over a dynamic file, maximize total no. of instructions: - honggfuzz --linux_perf_instr -- /usr/bin/tiffinfo -D ___FILE___ - Run the binary over a dynamic file, maximize total no. of branches: - honggfuzz --linux_perf_branch -- /usr/bin/tiffinfo -D ___FILE___ - Run the binary over a dynamic file, maximize unique branches (edges) via BTS: - honggfuzz --linux_perf_bts_edge -- /usr/bin/tiffinfo -D ___FILE___ - Run the binary over a dynamic file, maximize unique code blocks via Intel Processor Trace (requires libipt.so): - honggfuzz --linux_perf_ipt_block -- /usr/bin/tiffinfo -D ___FILE___ + honggfuzz -f input_dir -- /usr/bin/djpeg ___FILE___ + Use SANCOV instrumentation: + honggfuzz -f input_dir -C -- /usr/bin/djpeg ___FILE___ + Use persistent mode (libhfuzz/persistent.c) w/o instrumentation: + honggfuzz -f input_dir -P -x -- /usr/bin/djpeg_persistent_mode + Use persistent mode (libhfuzz/persistent.c) and compile-time instrumentation: + honggfuzz -f input_dir -P -- /usr/bin/djpeg_persistent_mode + Run the binary with dynamically generate inputs, maximize total no. of instructions: + honggfuzz --linux_perf_instr -- /usr/bin/djpeg ___FILE___ + As above, maximize total no. of branches: + honggfuzz --linux_perf_branch -- /usr/bin/djpeg ___FILE___ + As above, maximize unique branches (edges) via Intel BTS: + honggfuzz --linux_perf_bts_edge -- /usr/bin/djpeg ___FILE___ + As above, maximize unique code blocks via Intel Processor Trace (requires libipt.so): + honggfuzz --linux_perf_ipt_block -- /usr/bin/djpeg ___FILE___ ``` # OUTPUT FILES # |