Re: [Xen-devel] [xen-devel] [fuzz] [x86 emulator] Input size

2018-02-22 Thread Wei Liu
On Thu, Feb 22, 2018 at 01:39:01PM +0100, Paul Semel wrote: > Hello, > > > In the x86 instruction emulator fuzzer, when checking wether the input size > is correct, we are checking for this bounds : DATA_OFFSET < size < > INPUT_SIZE. > > > The fact is that INPUT_SIZE is actually the size of the

[Xen-devel] [xen-devel] [fuzz] [x86 emulator] Input size

2018-02-22 Thread Paul Semel
Hello, In the x86 instruction emulator fuzzer, when checking wether the input size is correct, we are checking for this bounds : DATA_OFFSET < size < INPUT_SIZE. The fact is that INPUT_SIZE is actually the size of the data buffer in the fuzz_corpus structure. This way, AFL is not able to ha