Index: third_party/afl/src/experimental/README.experiments |
diff --git a/third_party/afl/src/experimental/README.experiments b/third_party/afl/src/experimental/README.experiments |
new file mode 100644 |
index 0000000000000000000000000000000000000000..3e7e9eb4c543243ca48ef739b1464ae02cca3e76 |
--- /dev/null |
+++ b/third_party/afl/src/experimental/README.experiments |
@@ -0,0 +1,42 @@ |
+Here's a quick overview of the stuff you can find in this directory: |
+ |
+ - argv_fuzzing - a simple wrapper to allow cmdline to be fuzzed |
+ (e.g., to test setuid programs). |
+ |
+ - asan_cgroups - a contributed script to simplify fuzzing ASAN |
+ binaries with robust memory limits on Linux. |
+ |
+ - bash_shellshock - a simple hack used to find a bunch of |
+ post-Shellshock bugs in bash. |
+ |
+ - canvas_harness - a test harness used to find browser bugs with a |
+ corpus generated using simple image parsing |
+ binaries & afl-fuzz. |
+ |
+ - clang_asm_normalize - a script that makes it easy to instrument |
+ hand-written assembly, provided that you have clang. |
+ |
+ - crash_triage - a very rudimentary example of how to annotate crashes |
+ with additional gdb metadata. |
+ |
+ - distributed_fuzzing - a sample script for synchronizing fuzzer instances |
+ across multiple machines (see parallel_fuzzing.txt). |
+ |
+ - instrumented_cmp - an experiment showing how a custom memcmp() or |
+ strcmp() can be used to work around one of the |
+ limitations of afl-fuzz. |
+ |
+ - libpng_no_checksum - a sample patch for removing CRC checks in libpng. |
+ |
+ - persistent_demo - an example of how to use the LLVM persistent process |
+ mode to speed up certain fuzzing jobs. |
+ |
+ - post_library - an example of how to build postprocessors for AFL. |
+ |
+Note that the minimize_corpus.sh tool has graduated from the experimental/ |
+directory and is now available as ../afl-cmin. The LLVM mode has likewise |
+graduated to ../llvm_mode/*. |
+ |
+Most of the tools in this directory are meant chiefly as examples that need to |
+be tweaked for your specific needs. They come with some basic documentation, |
+but are not necessarily production-grade. |